Hack the Box - Jeeves Walkthrough
Interface found via Dirbuster
http://10.10.10.63:50000/askjeeves/
Initial
The achievement mindset
In this post I want to document how I finally achieved OSCP
Rdesktop
rdesktop -u USERNAME -p PASSWORD -g 95% 10.10.10.1
-g
Web Application Vulnerabilities 101 - Directory Traversal
Directory traversal aims to access files and directories that are stored outside
DVWA - File Inclusion
LFI & RFI are commonly found in poorly written PHP code, allows
CSRF - Cross Site Request Forgery
CSRF refers to an attack against authenticated web applications using Cookies wherein
XSS - Cross Site Scripting
XSS in an input validation weakness which allows an attacker to inject
XXE - XML External Entity
The XML External Entity (XXE) attack is a type of attack against
Unrestricted File Upload
Many web applications allow users to upload content. The content may be
SSRF - Server Side Request Forgery
Server Side Request Forgery (SSRF) is a vulnerability that describes the behaviour
SQL Injection Techniques
Basic
' or '1'='1
' OR '1&
nmap to grab low hanging fruit
Using nmap alongside searchsploit in Kali Linux to grab any low hanging