VariaType — Hack The Box

VariaType — Hack The Box

Hack The Box · VariaType

Typography puns aside, the attack surface is a font preview service and an admin queue. The walkthrough tracks abusing parser edge cases, recovering secrets from a queue worker, and rooting via a font cache daemon running as a trusted user.