Tag: Pentest

2025 2026 Abliteration Agpl Ai Benchmark Browser-Extension Comfyui Ctf Cve-2025-49113 Docker Forensics Gemma Gemma-4-12b Gemma-4-E2b Gemma-4-E4b Glm Glm-4.7-Flash Hack-Smarter Hackthebox Hauhaucs Heretic Huggingface Kl-Divergence Llm Ltx-2 Open-Source Pentest Plagiarism Qwen Qwen-3.6 Qwen-3.8 Qwen3-Vl Reaper-Abliteration Roundcube Smtp Uncensored-Llm Video-Generation Vision-Language
Hack Smarter - Aftermath
ctf pentest hack-smarter roundcube smtp cve-2025-49113 2026

Aftermath is an easy Linux lab on Hack Smarter. Three ports, one webmail app, and a privilege escalation that comes down to a single sudoers line.

Postfix still answers VRFY, which turns 499 names into one real account. That account logs into an unlinked Roundcube install, and Roundcube 1.5.9 is one release short of the fix for CVE-2025-49113. The shell that bug hands over may run apt-get as root.

October 2, 2026