- Published on
Máquina sobre Broken Access Control, BOLA, SQL Injection e linux capabilities.
Sqli
- Published on
On the Paradize machine, we need to exploit an SQL injection to upload a webshell and explore a path hijacking vulnerability.- Published on
The application has the following vulnerabilities: endpoint enumeration via FUZZ, SQL Injection, remote command execution (RCE), and privilege escalation via Linux capabilities.- Published on
The Lion machine is vulnerable to SQL injection, allowing RCE through the upload of a webshell, and has privilege escalation via cron jobs.- Published on
Machine involving SQL Injection, code injection, and reversing (PE).