OffSec

This writeup details the compromise of a target via a Flask API directory traversal vulnerability to gain SSH access, followed by privilege escalation to root through cron job PATH hijacking.