HTB Snoopy — From LFI to Root via DNS Hijacking and a Clamscan XXE
Snoopy is a Linux machine that chains an LFI-driven DNS zone hijack against a Mattermost instance with credential capture through a fake… Continue reading on Medium »
🎯 Vulnerability: Web Security Vulnerability
💡 Defense Fix: Implement strict input validation, contextual output encoding, and enforce least-privilege authorization controls.