xsspresso
xsspresso
Tags/ Config Disclosure

Config Disclosure

1 writeup tagged with Config Disclosure

WebEasyLinux

HTB — Nocturnal

ISP file manager path traversal leaks app config with credentials. ISPConfig adduser API abuse leads to root.

#Path Traversal#ISPConfig#Config Disclosure
May 24, 2025HackTheBox