Feed
Pro
Search

Sign in
FactoryKit - the AI software factory: tasks in, pull requests out Bug0 - The AI-native e2e QA regression testing The foreword by Hashnode - official blog from the Hashnode team Passmark - The open-source AI framework for regression testing Hashnode gql skill - let your AI agent publish to your Hashnode blog Hackathons Changelog Brand @hashnode on X Hashnode on LinkedIn Support - hello+support@hashnode.com Code of Conduct Terms Privacy Sitemap

Search Hashnode

Search posts, tags, users, and pages

FeedDiscussion

Yogeshwar Peela

1h ago

TryHackMe : Do Not Disturb Writeup

TL;DR Byte Lotus Poolside is a Node.js/Express booking app. A NoSQL injection in the login endpoint bypasses authentication entirely and lands directly in the staff role. The staff console's booking-c

exploitnotes.hashnode.dev8 min read

#do-not-disturb #do-not-disturb-thm #tryhackme #thm #thm-writeup #nosql-injection #mongodb-injection #authentication-bypass #ejs #server-side-template-injection #ssti #nodejs #expressjs #remote-code-execution #rce #node-inspector #chrome-devtools-protocol

Responses

No responses yet.

#privilege-escalation

#linux-privilege-escalation

#cyber-security

#penetration-testing