diff --git a/libssh2-cve-2026-55200-poc/README.md b/libssh2-cve-2026-55200-poc/README.md
index e03a32b..593a569 100644
--- a/libssh2-cve-2026-55200-poc/README.md
+++ b/libssh2-cve-2026-55200-poc/README.md
@@ -110,7 +110,7 @@ Run as a one-shot malicious server for a challenge client:
 python poc/libpwn_cve_2026_55200_server.py --serve --listen-host 0.0.0.0 --listen-port 2222
 ```
 
-Change `--listen-host` and `--listen-port` for your lab or HTB instance. The top of the script also leaves:
+Change `--listen-host` and `--listen-port` for your lab instance. The top of the script also leaves:
 
 ```python
 HOST = ""