Ansible-Playbooks, Cronjob, Easy, Java, Seasonal, Spring4shell

Writeup for HackTheBox’s Inject machine. We have an upload functionality in the web app and it accepts PNG files, although there are some bypasses but they didn’t lead anywhere.