[HTB] Unattended — Writeup (OSWE-Prep)

bigb0ss

Apr 13·10 min read

Unattended was a medium difficulty Linux box. Good learning path for:

• Nginx off-by-slash Attack
• SQLi (boolean-based Blind)
• SQLi → LFI (Abusing Existing <?php include(); ?>)
• LFI → PHP Session Poisoning → RCE
• Socket TTY Shell
• Linux initrd Exploit