HTB Labs - Tier 2 - "Base" Machine Walkthrough | By: CyberAlp0
YAZARCyberAlp0
YAYINLANMA TARİHİ6 Temmuz 2026
OKUMA SÜRESİ01 DK



Markup is a Tier 2 machine on HTB's Starting Point. You'll exploit an XXE injection to read files for a foothold, then abuse a scheduled task to escalate privileges and capture both flags.

Included is a Tier 2 machine on HTB's Starting Point. You'll exploit Local File Inclusion and TFTP to upload a web shell for a foothold, then escalate to root via the LXD container group.

Unified, HTB'nin Starting Point serisinde yer alan bir Tier 2 makinesidir. Bir UniFi uygulamasındaki Log4Shell (Log4j) zafiyetini istismar ederek ilk erişimi (foothold) elde edecek, ardından MongoDB kimlik bilgilerini çıkararak erişiminizi yükselteceksiniz.