- Published on
Máquina sobre Broken Access Control, BOLA, SQL Injection e linux capabilities.
All Posts
- Published on
On the Paradize machine, we need to exploit an SQL injection to upload a webshell and explore a path hijacking vulnerability.- Published on
The Injection machine is vulnerable to Command Injection (CVE-2022-36231) and privilege escalation via sudo.- Published on
Application has a BOLA vulnerability, unauthorized file access, SSH key usage, privilege escalation via SUID, and code execution.- Published on
The application has vulnerabilities of Local File Inclusion (LFI), Remote Code Execution (RCE) via Jenkins, and privilege escalation using a SUID binary.