HackTheBox - Forge
Bypass SSRF filters using domain redirection and abusing Python PDB
Code-review
HackTheBox - Gobox
SSTI in Golang, abuse S3 bucket, and NGINX backdoor
HackTheBox - Ophiuchi
Deserialization attack on YAML and reversing web assembly
HackTheBox - Tenet
Friendly PHP insecure deserialization attack and race condition
HackTheBox - Cereal (User)
Chaining XSS, SSRF, and deserialization vulnerabilities to get RCE
VulnHub - DC-9
DC-9 from VulnHub features a website that is vulnerable to SQL injection. I’m able to dump a bunch …
HackTheBox - Time
Exploiting an insecure deserialization on Jackson library and how to mitigate it
HackTheBox - Bucket
Pentesting against simulated AWS S3 Bucket
HackTheBox - OpenAdmin
Exploiting OpenNetAdmin vulnerability and sudo nano