Manager - HTB
As always, we will start off with a port scan: Alright, we’ve got a few things to look into: A DNS server on port 53 An HTTP server on port 80 …
Posts
Business Logic Flaws - Applied Review
Business logic vulnerabilities are flaws in the design or implementation of an application that let attackers produce unintended behavior. This can …
Drive - HTB
To read this post, enter the root user’s password hash ("$6…k1"). We start off with a port scan: The site is hosting something called Doodle Grive …
Information Disclosure - Applied Review
Information disclosures seem to be highly contextual depending on where you find them and what kinds of protections are in place. Either way, we will …
OS Command Injection - Applied Review
This type of command injection allows attackers to execute system commands on the server that is running the vulnerable application. Often times, an …
Path Traversal - Applied Review
This will be one of the much shorter entries in the list of applied review sections because path traversal is pretty straight forward. Even though …
Analytics - HTB
We start by scanning for open ports: We can analytical.htb to our hosts file and look at the web application. If we navigate to the site and try to …
Authentication - Applied Review
For this applied review, we are going to go through authentication, which is an important part of securing your web applications. This is not meant to …
SQL Injection - Applied Review
The goal of this applied review is to review over SQL injection techniques taught in the PortSwigger labs and to apply those strategies to CTF …
Visual - HTB
We start with a port scan: It looks like there is just one port open on HTTP, let’s give it a look: The page is telling us that we can link our GitHub …
Clicker - HTB
We can get started with a port scan: We see SSH, an HTTP server, something that appears to me Portmapper, and some kind of file share on port 2049. …
CozyHosting - HTB
We can begin with a port scan as usual: We can add cozyhosting.htb to our /etc/hosts file and take a look at the site. The site has a login page, but …