YYogeshwar Peela·Aug 4TryHackMe : Do Not Disturb WriteupComplete Do Not Disturb THM walkthrough covering NoSQL injection, EJS SSTI, Node Inspector abuse, privilege escalation, and root.8 min read·exploitnotes.hashnode.dev1
PPrasnjit Kumar sharma·Aug 28, 2024NoSQL InjectionBasic authentication bypass Using not equal ($ne) or greater ($gt) In PHP you can send an Array changing the sent parameter from parameter=foo to parameter[arrName]=foo. The exploits are based in adding an Operator: #in URL username[$ne]=toto&passwor...4 min read·itsecurenep.hashnode.dev
