HackTheBox - Forge
Bypass SSRF filters using domain redirection and abusing Python PDB
ffuf
HackTheBox - Nunchucks
SSTI in Nunjucks and SUID capability on Perl
HackTheBox - Tenet
Friendly PHP insecure deserialization attack and race condition
Bypass SSRF filters using domain redirection and abusing Python PDB
SSTI in Nunjucks and SUID capability on Perl
Friendly PHP insecure deserialization attack and race condition