Uday Bhale (@rudraub)

Hack The Box: Dancing

Machine Overview Machine: Dancing Platform: Hack The Box Difficulty: Easy Focus: SMB Enumeration and File Share Access Objective The goal of this machine is to identify exposed services, discover avai

5 min readhackwithrudraub.hashnode.dev

Sep 6

RecruiteX Project – Web Application Penetration Testing Written Short Notes

Explore the RecruiteX web application penetration test, covering reconnaissance, API testing, IDOR, password reset, file upload, and RCE.

4 min readhackwithrudraub.hashnode.dev

Aug 25

Part 3: From Admin Panel to Remote Code Execution

Follow a web pentest attack chain from admin panel access and file upload bypass to RCE, web shell, reverse shell, and server compromise.

7 min readhackwithrudraub.hashnode.dev

Aug 17

Weak Password Reset Mechanism: From IDOR to Admin Access

Learn how IDOR, exposed reset tokens, weak token generation, and missing rate limits can lead to administrator account takeover.

5 min readhackwithrudraub.hashnode.dev

Aug 16

RecruiteX : Web Security Assessment Part 1 | Recon to IDOR Guided Pentest: Web (Part 1)

Learn web pentesting from Nmap reconnaissance to LAMP fingerprinting, Gobuster enumeration, API discovery, and IDOR in Part 1.

5 min readhackwithrudraub.hashnode.dev

Aug 2

Uday Bhale

About

Available for

Uday Bhale's blogs

Hack The Box: Dancing

RecruiteX Project – Web Application Penetration Testing Written Short Notes

Part 3: From Admin Panel to Remote Code Execution

Weak Password Reset Mechanism: From IDOR to Admin Access

RecruiteX : Web Security Assessment Part 1 | Recon to IDOR Guided Pentest: Web (Part 1)

Uday Bhale

About

Available for

Uday Bhale's blogs

Hack The Box: Dancing

RecruiteX Project – Web Application Penetration Testing Written Short Notes

Part 3: From Admin Panel to Remote Code Execution

Weak Password Reset Mechanism: From IDOR to Admin Access

RecruiteX : Web Security Assessment Part 1 | Recon to IDOR Guided Pentest: Web (Part 1)

Uday Bhale

About

Available for

Uday Bhale's blogs

Hack The Box: Dancing

RecruiteX Project – Web Application Penetration Testing Written Short Notes

Part 3: From Admin Panel to Remote Code Execution

Weak Password Reset Mechanism: From IDOR to Admin Access

RecruiteX : Web Security Assessment Part 1 | Recon to IDOR Guided Pentest: Web (Part 1)

Search Hashnode

Uday Bhale

About

Available for

Uday Bhale's blogs

Hack The Box: Dancing

RecruiteX Project – Web Application Penetration Testing Written Short Notes

Part 3: From Admin Panel to Remote Code Execution

Weak Password Reset Mechanism: From IDOR to Admin Access

RecruiteX : Web Security Assessment Part 1 | Recon to IDOR Guided Pentest: Web (Part 1)