https://p4n4.xyz/tags/markdown/Recent content in Markdown on p4n4SecHugo -- 0.147.7en-usTue, 13 Oct 2026 00:00:00 +0000https://p4n4.xyz/posts/htb/challenge/armaxis/Tue, 13 Oct 2026 00:00:00 +0000https://p4n4.xyz/posts/htb/challenge/armaxis/Armaxis chains an IDOR in the password-reset flow to seize the admin account, then abuses a markdown image parser that shells out to an unquoted curl for OS command injection — a single injected cat reads the flag, where the author’s intended route uses curl’s file:// LFI.