Tag: insecure-plugin-design

All the articles with the tag "insecure-plugin-design".

• HTB Preignition — Finding the Door They Forgot

  6 Apr, 2026

  HackTheBox Preignition combines directory enumeration with default credentials to compromise an nginx web server. The same attack pattern — find the management interface, try the default key — is how AI agent tool endpoints get compromised in practice.