MQTT
OFFSEC - Proving Grounds - GLIDER
·1919 words·10 mins
OFFSEC PG PRACTICE
XXE
PHP FILTER
PSPY
MQTT
XXE on port 80 enables PHP file reads and RCE. After gaining access, pspy64 reveals Mosquitto credentials; subscribing to the MQTT topic exposes root credentials.