https://basil9099.github.io/tags/cwe-807/Recent content in CWE-807 on Angus Dawson — Homelab & CTFshttps://basil9099.github.io/images/og-default.pnghttps://basil9099.github.io/images/og-default.pngHugo -- 0.165.0en-usSun, 20 Sep 2026 00:00:00 +0000https://basil9099.github.io/ctf/helix-htb/Sun, 20 Sep 2026 00:00:00 +0000https://basil9099.github.io/ctf/helix-htb/A Linux box modelling an industrial plant, where the privilege escalation is not a CVE but the plant’s own safety logic being fed a forged sensor reading. Unauthenticated Apache NiFi → operator SSH key in support-bundles → password-cracked PLC manual → anonymous OPC UA writes → CalibrationOffset ramped into the maintenance window → helix-maint-console → root.