https://chaelsoo.me/tags/path-traversal/Recent content in Path-Traversal on kanyo's blogHugo -- gohugo.ioen-gbTue, 26 May 2026 00:00:00 +0000https://chaelsoo.me/writeups/hackini-corp-monitor/Tue, 26 May 2026 00:00:00 +0000https://chaelsoo.me/writeups/hackini-corp-monitor/<p>A Linux machine running a Drupal intranet CMS with an anonymous FTP server sitting next to it. The FTP turned out to be more of a hint than an attack surface. The real entry was Drupalgeddon2, a 2018 RCE that still shows up everywhere. Once inside, Grafana 8.2.6 was hiding on port 3000, running an unauthenticated path traversal that handed over root&rsquo;s SSH key directly.</p> <p><em>Did this one with <a href="https://www.linkedin.com/in/aymen-drid-36bba4243/">Aymen</a>. Always more fun when someone&rsquo;s hunting alongside you and just as locked in. Big shoutout to him.</em></p>