xPop3

xPOPE

Cybersecurity enthusiast building and documenting projects. Find me on @github.

Recent Projects

Oct 17, 2026

HTB: Enigma

A full chain on HackTheBox Enigma: an anonymous NFS share leaks onboarding creds, password reuse opens a mailbox, then three CVEs stack from SQL injection to P7M command injecti...

  • htb
  • linux
  • writeup
  • nfs
  • sql-injection
  • command-injection
  • privilege-escalation
Jul 30, 2026

HTB: Orion

An easy Linux box that chains three failure classes: a pre-auth CraftCMS deserialization RCE, database credentials sitting in a .env file, and a legacy telnetd daemon with an ar...

  • htb
  • linux
  • easy
  • craftcms
  • cve-2025-32432
  • cve-2026-24061
  • rce
  • privesc