GitHub Repos· Aug 10, 2026· by abedallarawashdeh🔍 CVE-2023-0386

abedallarawashdeh/HTB-TwoMillion-machine

Hack The Box TwoMillion machine writeup — JWT/invite-code bypass, IDOR, command injection, and CVE-2023-0386 privilege escalation.

🎯 Vulnerability: Insecure Direct Object Reference (IDOR)

💡 Defense Fix: Enforce object-level access control checks (ABAC/RBAC) on the server side for every API request.

#ctf#ctf-writeups#cve-2023-0386#cybersecurity#hackthebox#htb-writeups#pentesting#privilege-escalation#CVE-2023-0386