Cross-Site Scripting (XSS) | Hack The Box AcademyInteractive Sessions & Skill Assessment Section 2/10 To get the flag, use the same payload we used above, but change its JavaScript code to show the cookie instead of showing the url. Note: After tySep 25 · 6 min readashleyjovanska.hashnode.dev
Javascript Deobfuscation | Hack The BoxInteractive Sessions & Skill Assessment Repeat what you learned in this section, and you should find a secret flag, what is it? Open a web browser > Navigate to target URL > Right click -> Inspect pJul 19 · 4 min readashleyjovanska.hashnode.dev
Web Fuzzing | Hack the Box AcademyInteractive Sessions & Skill Assessment Within the "webfuzzing_hidden_path" path on the target system (ie http://IP:PORT/webfuzzing_hidden_path/), fuzz for folders and then files to find the flag. FJul 16 · 6 min readashleyjovanska.hashnode.dev
Information Gathering - Web Edition | Hack The Box AcademyInteractive Sessions & Skill Assessment. Perform a WHOIS lookup against the paypal.com domain. What is the registrar Internet Assigned Numbers Authority (IANA) ID number? whois paypal.com What is Jul 10 · 9 min readashleyjovanska.hashnode.dev
Using Web Proxies | Hack The Box AcademyInteractive Sessions & Skill Assessment Try intercepting the ping request on the server shown above, and change the post data similarly to what we did in this section. Change the command to read 'flaJun 27 · 8 min readashleyjovanska.hashnode.dev
