SSunnyincybersecurity-learning.hashnode.dev·2h ago · 19 min readTryHackMe SQL Injection Beginner-Friendly Learning GuideIntroduction I recently completed the SQL Injection room on TryHackMe as part of my ongoing cybersecurity learning journey. SQL Injection is one of the most important web application security vulnerab00
Ssecurifyedgeinsecurifyedge-vapt-buyer-guide.hashnode.dev·6h ago · 9 min readVAPT Buyer GuideINTRODUCTION Penetration testing is one of the most commonly misunderstood purchases a business makes. Unlike buying software or hiring a contractor, the quality of a penetration test is almost imposs00
LVLong Voinlongvh0904.hashnode.dev·1d ago · 42 min readHTB Attack Diaries - Bedside: The Clinic That Deserialized Its Own DeathIntroduction Bedside is a Medium-rated Linux box dressed up as a heart clinic "transitioning into the age of AI." And like most things that promise AI, what sits underneath the glossy paint is a chain00
KK4M1_n0_73in0xk4m1.hashnode.dev·2d ago · 5 min readGaining root access on a vulnerable Linux server using a 20 year old bug / Kioptrix 1 exploitation.Now we're done with enumerating our target and finding out all that we need to know to attack our target and start trying to gain access First of all I need to get the tools I will use to gain root. I00
YPYogeshwar Peelainexploitnotes.hashnode.dev·3d ago · 15 min readHackTheBox : Pterodactyl WriteupSummary Pterodactyl is a Linux box built around an unauthenticated RCE in the Pterodactyl game-server management panel. A static "MonitorLand" landing page on port 80 gives no functionality of its own00
KK4M1_n0_73in0xk4m1.hashnode.dev·3d ago · 8 min readScoping out a Linux server / Kioptrix 1 Recon and Enumeration.So this is the initial phase of the Kioptrix hack. Kioptrix Level 1 is an intentionally vulnerable VM I downloaded from VulnHub and ran in VMware. The goal of this machine is simply to get root. I'm l00
VGVivek Goswamiinvivekgoswami.hashnode.dev·3d ago · 2 min readTryHackMe’s Room - Tomghost Walkthrough Reconnaissance I usually begin with a classic Network Mapper(nmap) scan with the service version detection and aggressive scanning. As we can see here 22,53,8009,8080 are in open state 8080 HTTP wit10
YPYogeshwar Peelainexploitnotes.hashnode.dev·5d ago · 4 min readHackTheBox : WayWitch WriteupSummary The ticket portal generates guest session JWTs client-side, signing them with an HMAC secret (halloween-secret) that's hardcoded directly in the page's JavaScript. Since the server verifies to00
RMRenukashree Muraliinquietbytes.hashnode.dev·5d ago · 4 min readJWT Attack Lab — Part 3: Protecting a Route, Then Bypassing It With alg: nonePart 3 of a series building a Flask API with JWT authentication, then deliberately exploiting six real vulnerabilities in it. Part 2 covered what a JWT actually is and how one gets issued. This part p00
YPYogeshwar Peelainexploitnotes.hashnode.dev·5d ago · 4 min readHackTheBox : Void Whispers WriteupSummary The "Void Whispers" mail-settings panel passes the user-supplied sendMailPath field directly into shell_exec("which $sendMailPath") with no escaping. The app only filters literal whitespace, w00
