$#pcap-analysis

HTB: Cap

A "Security Snapshot" dashboard lets any user page through other users' packet captures by ID — one of them leaks an FTP password reused for SSH, and a stray Linux capability on python3.8 hands over root instantly.

• #idor
• #pcap-analysis
• #linux-capabilities
• #privesc