DevArea — Hack The Box

DevArea — Hack The Box

Hack The Box · DevArea

Developers left a CI artifact and a sandbox API online longer than they should have. The path covers poisoning a build parameter, escaping a container boundary, and moving laterally into a host service that mounts an internal registry share.