February 2026
5 writeupsHTB Season 10: Interpreter
A Linux Medium built around a healthcare integration platform. The exploit path is interesting, but the privesc is what makes this machine worth remembering.
HTB: Expressway
A Linux Medium with no web surface at all. The whole foothold runs through a VPN service on UDP 500, IKE aggressive mode leaks an identity, and a cracked PSK gets you in.
HTB Season 10: WingData
A Linux Easy machine with an exposed FTP service, some credential work, and a sudo misconfiguration that makes the privesc almost too clean.
HTB: Conversor
A Linux Medium built around a file conversion web app. XSLT injection lets you write files to a cron-watched directory, and a vulnerable needrestart version gets you to root.
HTB Season 10: Pterodactyl
A Linux Medium built around a game server management panel. Exploitation leads through database access all the way to root, with a couple of interesting hops in between.