Hack The Box walkthrough with Node.js OTP brute-force script included Challenge Description SpeedNet is an ISP platform. Join our bug bounty to find vulnerabilities and retrieve the hidden flag. Test using the email service athttp://IP:PORT/emails/ Use: test@email.htb Initial Recon I began by exploring the application, registering a test account, and creating a visual map of the
Challenge Link: JinjaCare — HTB Challenge Description JinjaCare is a web application designed to manage COVID-19 vaccination records. It allows users to view their personal information, medical history, and generate digital vaccination certificates. Your task is to discover vulnerabilities in the system and extract the hidden flag. Recon and Initial Exploration Upon launching the instance, the home
Challenge Link Challenge Description Neovault is a trusted banking app for fund transfers and downloading transaction history. You’re invited to explore the app, find potential vulnerabilities, and uncover the hidden flag within. Initial Exploration After starting the instance and visiting the host, I landed on the NeoVault homepage. I began by clicking around and interacting
This post is a write-up for the “Security Footage” challenge on TryHackMe. The challenge description reads: “Someone broke into our office last night, but they destroyed the hard drives with the security footage. Can you recover the footage?” We’re provided with a .pcap file (packet capture) that presumably contains the remaining trace of the lost footage. Analyzing
In this write-up, I’ll guide you through solving the Light challenge from TryHackMe. The challenge involves exploiting a database application to retrieve sensitive information. Let’s dive into the steps! Challenge Description The task provides the following instructions: I am working on a database application called Light! Would you like to try it out?If so, the application is
Challenge Description The Sticker Shop “Your local sticker shop has finally developed its own webpage. They do not have much experience with web development, so they decided to develop and host everything on the same computer that they use for browsing the internet and looking at customer feedback. Smart move! Can you read the flag