https://jcdematos.com/tags/misconfiguration/ Recent content in Misconfiguration on Jc de Matos Hugo en Fri, 02 Oct 2026 00:00:00 +0000 https://jcdematos.com/writeups/medicated/ Fri, 02 Oct 2026 00:00:00 +0000 https://jcdematos.com/writeups/medicated/ Exposed backup zip files leak an SSH key restricted to scp-only, bypassed by overwriting authorized_keys, then root via a PATH hijack on a cron job’s run-parts call. https://jcdematos.com/writeups/cache/ Sat, 12 Sep 2026 00:00:00 +0000 https://jcdematos.com/writeups/cache/ Redis misconfiguration with unauthenticated access, exploited to write a webshell, then root via a second internal Redis instance running as root.