SQL Injection Fundamentals | Hack The Box AcademyConnect to the database using the MySQL client rom the command line. Use the 'show databases;' command to list databases in the DBMS. What is the name of the first database? mysql -h target_ip -P port5 min read·ashleyjovanska.hashnode.devOct 31
Cross-Site Scripting (XSS) | Hack The Box AcademyInteractive Sessions & Skill Assessment Section 2/10 To get the flag, use the same payload we used above, but change its JavaScript code to show the cookie instead of showing the url. Note: After ty6 min read·ashleyjovanska.hashnode.devSep 25
Javascript Deobfuscation | Hack The Box AcademyInteractive Sessions & Skill Assessment Repeat what you learned in this section, and you should find a secret flag, what is it? Open a web browser > Navigate to target URL > Right click -> Inspect p4 min read·ashleyjovanska.hashnode.devJul 19
Web Fuzzing | Hack the Box AcademyInteractive Sessions & Skill Assessment Within the "webfuzzing_hidden_path" path on the target system (ie http://IP:PORT/webfuzzing_hidden_path/), fuzz for folders and then files to find the flag. F6 min read·ashleyjovanska.hashnode.devJul 16
Information Gathering - Web Edition | Hack The Box AcademyInteractive Sessions & Skill Assessment. Perform a WHOIS lookup against the paypal.com domain. What is the registrar Internet Assigned Numbers Authority (IANA) ID number? whois paypal.com What is9 min read·ashleyjovanska.hashnode.devJul 10
