HTB- CodePartTwo
Recon:
Found a website at :8000
Dirb returned a /download
Downloading app.zip.
We found js2py in requirement (its vulnerable !!)
Now for js2py I found an exploit : Github
Setup a netcat at 4444 and make sure to modify IP to your VPN.
import js2p...
voidbenderswriteups.hashnode.dev3 min read