Uday Bhale (@rudraub)

Hack The Box: Dancing

Machine Overview Machine: Dancing Platform: Hack The Box Difficulty: Easy Focus: SMB Enumeration and File Share Access Objective The goal of this machine is to identify exposed services, discover avai

Sep 6 · 5 min readhackwithrudraub.hashnode.dev

RecruiteX Project – Web Application Penetration Testing Written Short Notes

From Enumeration to Exploitation The RecruiteX assessment was approached as a real-world web application penetration test rather than simply checking for known vulnerabilities. The objective was to un

Aug 25 · 4 min readhackwithrudraub.hashnode.dev

Part 3: From Admin Panel to Remote Code Execution

We made it. After chaining IDOR → Information Disclosure → Weak Password Reset → Administrator Access, we finally reached the admin dashboard. But administrator access isn't the end of the attack. It'

Aug 17 · 7 min readhackwithrudraub.hashnode.dev

Weak Password Reset Mechanism: From IDOR to Admin Access

The IDOR from Part 1 gave us something much more valuable than just another user's profile. This is part 2 of the guided pen test lab. It gave us the administrator's email address. Now the question is

Aug 16 · 5 min readhackwithrudraub.hashnode.dev

RecruiteX : Web Security Assessment Part 1 | Recon to IDOR Guided Pentest: Web (Part 1)

From Reconnaissance to Discovering an IDOR Status: 🚧 Work in Progress This write-up documents my learning journey through the Guided Pentest: Web room. This is Part 1, covering reconnaissance, techn

Aug 2 · 5 min readhackwithrudraub.hashnode.dev

Uday Bhale

About

Available for

Uday Bhale's blogs

Hack The Box: Dancing

RecruiteX Project – Web Application Penetration Testing Written Short Notes

Part 3: From Admin Panel to Remote Code Execution

Weak Password Reset Mechanism: From IDOR to Admin Access

RecruiteX : Web Security Assessment Part 1 | Recon to IDOR Guided Pentest: Web (Part 1)

Uday Bhale

About

Available for

Uday Bhale's blogs

Hack The Box: Dancing

RecruiteX Project – Web Application Penetration Testing Written Short Notes

Part 3: From Admin Panel to Remote Code Execution

Weak Password Reset Mechanism: From IDOR to Admin Access

RecruiteX : Web Security Assessment Part 1 | Recon to IDOR Guided Pentest: Web (Part 1)

Uday Bhale

About

Available for

Uday Bhale's blogs

Hack The Box: Dancing

RecruiteX Project – Web Application Penetration Testing Written Short Notes

Part 3: From Admin Panel to Remote Code Execution

Weak Password Reset Mechanism: From IDOR to Admin Access

RecruiteX : Web Security Assessment Part 1 | Recon to IDOR Guided Pentest: Web (Part 1)

Search Hashnode

Uday Bhale

About

Available for

Uday Bhale's blogs

Hack The Box: Dancing

RecruiteX Project – Web Application Penetration Testing Written Short Notes

Part 3: From Admin Panel to Remote Code Execution

Weak Password Reset Mechanism: From IDOR to Admin Access

RecruiteX : Web Security Assessment Part 1 | Recon to IDOR Guided Pentest: Web (Part 1)