Information# Box# Name: Book Profile: www.hackthebox.eu Difficulty: Medium OS: Linux Points: 30 Write-up# Overview# TL;DR: SQL truncation -> admin accounts SSRF -> XSS -> file disclosure
Intro# When doing penetration testing using a black box approach, you may find a SQL injection (SLQi) by fuzzing with common payloads. Except if there is a verbose error disclosing the original SQL qu
Information# Box# Name: Obscurity Profile: www.hackthebox.eu Difficulty: Medium OS: Linux Points: 30 Write-up# Overview# Network Enumeration: nmap 22, 8080 Web application discovery: hints Web app
Information# Box# Name: OpenAdmin Profile: www.hackthebox.eu Difficulty: Easy OS: Linux Points: 20 Write-up# Overview# Network Enumeration: port 80, 22 Web Application Enumeration: find /ona/ Web
Information# Box# Name: Control Profile: www.hackthebox.eu Difficulty: Hard OS: Windows Points: 40 Write-up# Overview# Network Enumeration: nmap, port 80, 3306 Webapp Enumeration: admin.php, X-For
Information# CTF# Name : ECSC 2019 Quals Team France Website : www.ecsc-teamfrance.fr Type : Online Format : Jeopardy (individual) This is more my thoughts proceedings, than a concise write-up. 124
Information# CTF# Name : *CTF 2019 Website : wpictf.xyz Type : Online Format : Jeopardy CTF Time : link mywebsql - Web# http://34.92.36.201:10080/ OSINT# Let's find intel about MyWebSQL. We can lo
Information# CTF# Name : Sunshine CTF 2019 Website : 2019.sunshinectf.org Type : Online Format : Jeopardy CTF Time : link 150 - Wrestler Name Generator - Web# Even better than the Wu-Tang name gene
Information# CTF# Name : TAMUctf 19 Website : tamuctf.com Type : Online Format : Jeopardy CTF Time : link Easy - Robots Rule - Web# http://web5.tamuctf.com/ $ curl http://web5.tamuctf.com/robots.t
Information# CTF# Name : Saudi and Oman National Cyber Security CTF 2019 Quals Website : cybertalents.com Type : Online Format : Jeopardy CTF Time : link 200 - Maria - Web# Maria is the only person