---
title: "Ashley Jovanska (@ashleyjovanska) | Hashnode"
description: "Pentester | Bug Bounty Hunter. Read the latest articles by Ashley Jovanska on Hashnode."
url: "https://hashnode.com/@ashleyjovanska"
---

@ashleyjovanska

# Ashley Jovanska

@ashleyjovanska · Germany · Joined June 2026

Pentester | Bug Bounty Hunter

### [SQL Injection Fundamentals | Hack The Box Academy](https://ashleyjovanska.hashnode.dev/sql-injection-fundamentals-hack-the-box-academy?utm_source=hashnode&utm_medium=feed)

Connect to the database using the MySQL client rom the command line. Use the 'show databases;' command to list databases in the DBMS. What is the name of the first database? mysql -h target\_ip -P port

5 min read · [ashleyjovanska.hashnode.dev](https://ashleyjovanska.hashnode.dev/sql-injection-fundamentals-hack-the-box-academy?utm_source=hashnode&utm_medium=feed)

[Oct 31](https://hashnode.com/posts/sql-injection-fundamentals-hack-the-box-academy/6ae5b671b5b8e7bce75dfbc4)

### [Cross-Site Scripting (XSS) | Hack The Box Academy](https://ashleyjovanska.hashnode.dev/cross-site-scripting-xss-hack-the-box-academy?utm_source=hashnode&utm_medium=feed)

Interactive Sessions & Skill Assessment Section 2/10 To get the flag, use the same payload we used above, but change its JavaScript code to show the cookie instead of showing the url. Note: After ty

6 min read · [ashleyjovanska.hashnode.dev](https://ashleyjovanska.hashnode.dev/cross-site-scripting-xss-hack-the-box-academy?utm_source=hashnode&utm_medium=feed)

[Sep 25](https://hashnode.com/posts/cross-site-scripting-xss-hack-the-box-academy/6ab68e039ba73d2f87181b31)

### [Javascript Deobfuscation | Hack The Box Academy](https://ashleyjovanska.hashnode.dev/javascript-deobfuscation-hack-the-box-academy?utm_source=hashnode&utm_medium=feed)

Interactive Sessions & Skill Assessment Repeat what you learned in this section, and you should find a secret flag, what is it? Open a web browser > Navigate to target URL > Right click -> Inspect p

4 min read · [ashleyjovanska.hashnode.dev](https://ashleyjovanska.hashnode.dev/javascript-deobfuscation-hack-the-box-academy?utm_source=hashnode&utm_medium=feed)

[Jul 19](https://hashnode.com/posts/javascript-deobfuscation-hack-the-box-academy/6a5c7c117707428157929de8)

### [Web Fuzzing | Hack the Box Academy](https://ashleyjovanska.hashnode.dev/web-fuzzing-hack-the-box-academy?utm_source=hashnode&utm_medium=feed)

Interactive Sessions & Skill Assessment Within the "webfuzzing\_hidden\_path" path on the target system (ie http://IP:PORT/webfuzzing\_hidden\_path/), fuzz for folders and then files to find the flag. F

6 min read · [ashleyjovanska.hashnode.dev](https://ashleyjovanska.hashnode.dev/web-fuzzing-hack-the-box-academy?utm_source=hashnode&utm_medium=feed)

[Jul 16](https://hashnode.com/posts/web-fuzzing-hack-the-box-academy/6a5896b89db6dde5bd56ef08)

### [Information Gathering - Web Edition | Hack The Box Academy](https://ashleyjovanska.hashnode.dev/information-gathering-web-edition-hack-the-box-academy?utm_source=hashnode&utm_medium=feed)

Interactive Sessions & Skill Assessment. Perform a WHOIS lookup against the paypal.com domain. What is the registrar Internet Assigned Numbers Authority (IANA) ID number? whois paypal.com What is

9 min read · [ashleyjovanska.hashnode.dev](https://ashleyjovanska.hashnode.dev/information-gathering-web-edition-hack-the-box-academy?utm_source=hashnode&utm_medium=feed)

[Jul 10](https://hashnode.com/posts/information-gathering-web-edition-hack-the-box-academy/6a50ddc5e2ddd1e6fcb68a3a)