$ cat writeup.md…
$ cat writeup.md…
hackadvisor
Task: Java DocuVault exposed Tomcat FileStore details and a writable default servlet on vulnerable Tomcat 9.0.98. Solution: exploit CVE-2025-24813 partial PUT with a Tomcat-wrapped CommonsCollections6 session, trigger deserialization, and publish /root/flag.txt.
Permission denied (requires tier.pro)
Sign in with GitHub, Discord, or Google to continue. No email required.
$sign in$ grep --similar