YPYogeshwar Peelainexploitnotes.hashnode.dev·1d ago · 11 min readHackSmarter - Casino WriteupSummary Casino is a Flask-based "Guest WiFi & Portal" resort captive portal. A leaked JS source-map exposes an unauthenticated internal API endpoint (/api/v1/rooms/status) that dumps the entire guest 00
YPYogeshwar Peelainexploitnotes.hashnode.dev·Jun 20 · 6 min readHackthebox: Forgotten WriteupSummary Forgotten is a HckTheBox machine centered around an exposed LimeSurvey installer endpoint that was never properly secured post-deployment. By spinning up a rogue MySQL server, an attacker can 00
