· 16 min easy Windows Arctic
HTB: Arctic
Adobe ColdFusion 8 on Windows Server 2008 R2 yields unauthenticated RCE through a three-part chain: directory traversal for credential extraction, FCKeditor file upload, and LFI-based CFML code injection. MS10-059 escalates to SYSTEM after JuicyPotato fails in the constrained cfexecute context.
#htb
#coldfusion
#windows
#directory-traversal +1
· 16 min easy Windows Devel
HTB: Devel
Anonymous FTP write access to an IIS web root creates a trivial foothold. The real lesson is in the privilege escalation: unpatched Windows 7 with no service packs is a kernel exploit playground.
#htb
#ftp
#iis
#aspx +4