HTB STARTING POINT · Tier 1
Funnel
Anonymous FTP leaks credentials; SSH login reveals a PostgreSQL container reachable via local port forwarding — the flag is a database row.…
Postgresql
HTB STARTING POINT · Tier 2
Vaccine
Anonymous FTP yields a ZIP cracked with john. The PHP login is SQL-injectable. pg_dump in a sudo rule lets vi escape to root — classic sudo abuse.…