Credential Harvesting

HTB: Reactor

Reactor is an Easy-rated Linux machine where initial access is gained by exploiting CVE-2025-55182 (React2Shell), a pre-auth RCE in React Server Components …

May 24, 2026 · 4232 words · 20 min

Easy Linux Season 11 Season of the Punk CVE-2025-55182 React2Shell SQLite Credential Harvesting NodeJS Debug Port Hijack

VULNLAB: Tengu

Tengu is a medium-rated chained machine on VulnLab, features a mixed environment with two Windows hosts and one Linux host. Exploiting Node-RED on Linux (with …

March 28, 2024 · 8124 words · 39 min

Medium Windows Node-RED Credential harvesting MSSQL SUDO NTLM hash gMSA Code execution DPAPI

No posts match this tag.