↓Skip to main content

MAGE

OFFSEC - Proving Grounds - ZAB

30 August 2026·1473 words·7 mins

OFFSEC PG PRACTICE MAGE PACK2THEROOT CVE-2026-41651

Gobuster finds local.txt on port 80. A Mage web app on port 6789 provides browser-based terminal access. The server is vulnerable to Pack2TheRoot (CVE-2026-41651), enabling privilege escalation to root.