https://chaelsoo.me/tags/anuko/Recent content in Anuko on kanyo's blogHugo -- gohugo.ioen-gbTue, 26 May 2026 00:00:00 +0000https://chaelsoo.me/writeups/hackini-legacy/Tue, 26 May 2026 00:00:00 +0000https://chaelsoo.me/writeups/hackini-legacy/<p>The fourth machine in the chain. A Linux server running two web services on non-standard ports. One was an older Anuko Time Tracker instance with a known SQL injection CVE, the other was a Webmin panel that opened up once you had the right credentials. The interesting part here was that this machine didn&rsquo;t require brute-forcing or clever guessing: the credentials came from earlier in the chain, and the exploit path came from recognizing the software version and knowing where to look.</p>