Cereal

hard windows

Hack The Box machine, hard difficulty, with 9 identified techniques.

▶ Full video by IppSec Open on HTB

1. Initial access

  1. Exposed .git repository ▶ watch in the video
  2. Git history ▶ watch in the video
  3. JWT attacks ▶ watch in the video
  4. Insecure deserialization ▶ watch in the video
  5. Cross-Site Scripting (XSS) ▶ watch in the video

3. Privilege escalation to root/SYSTEM

  1. Internal services and port forwarding ▶ watch in the video
  2. GraphQL ▶ watch in the video
  3. SSRF ▶ watch in the video
  4. SeImpersonate / Potatoes ▶ watch in the video

Keep practising the same skills

Something missing or wrong on this page? Tell me →