https://jcdematos.com/tags/path-hijack/ Recent content in PATH Hijack on Jc de Matos Hugo en Fri, 02 Oct 2026 00:00:00 +0000 https://jcdematos.com/writeups/medicated/ Fri, 02 Oct 2026 00:00:00 +0000 https://jcdematos.com/writeups/medicated/ Exposed backup zip files leak an SSH key restricted to scp-only, bypassed by overwriting authorized_keys, then root via a PATH hijack on a cron job’s run-parts call.