https://b3ta-blocker.github.io/blog en-us root.b3ta.blocker@gmail.com (Hassaan Ali Bukhari) root.b3ta.blocker@gmail.com (Hassaan Ali Bukhari) Sat, 10 Oct 2026 00:00:00 GMT https://b3ta-blocker.github.io/blog/cap https://b3ta-blocker.github.io/blog/cap An IDOR vulnerability in a web dashboard leaks FTP credentials captured in a packet dump, leading to user access. From there, a misconfigured Linux capability on the Python binary grants a straightforward path to root. Sat, 10 Oct 2026 00:00:00 GMT root.b3ta.blocker@gmail.com (Hassaan Ali Bukhari) hacktheboxlinuxMachineeasyidorlinux-capabilities