Deserialization
-
Breaking in before the VPN broke down - A Journey through Precious (HTB Writeup)
Posted on 9 mins
A full walkthrough of the Hack The Box machine “Precious” — from enumeration to exploitation, including a clever pdfkit command injection and Ruby YAML deserialization for root. With shell stabilisation and some VPN drama on the side.