CyberHeroes is a CTF with “Easy” difficulty on TryHackMe. In order to get the flag, you have to bypass the authentication mechanisms of the web page. The web app After navigating to the displayed IP address in a browser the following web page is shown.

Tech_Supp0rt: 1 is a boot2root machine on TryHackMe. The room has “Easy” difficulty . Enumeration I’ve started the enumeration phase with a Nmap scan. The following command scans all ports of the target and utilizes script and version enumeration. The results will be additionally outputted to a file called “initial.nmap”…

This challenge is from the Web Security Academy by Portswigger. It is under the category “OS command injection”. After starting the lab you will be redirected to a web shop. When selecting an item with the button “View details”, you will redirected to a details page of the item.

Redeemer is a boot2root machine on HackTheBox. It has “Very Easy” difficulty and is part of Tier 0 starting point challenges. Enumeration As usual I’ve started with an Nmap scan: sudo nmap -p- 10.129.196.84 -sC -sV -oN nmap/initial This will scan all ports of the target and use scripts and service…

Dancing is a boot2root machine on HackTheBox. It is “Very Easy” difficulty and is part of Tier 0 starting point challenges. Enumeration I have started with the following Nmap scan: sudo nmap -p- 10.129.1.12 -sC -sV -oN nmap/initial It will scan with scripts and enumerate versions of all ports on…

Fawn is a boot2root CTF on HackTheBox. It is “Very Easy” difficulty and is part of Tier 0 starting point challenges. Enumeration I have started the following Nmap scan: sudo nmap -p- 10.129.1.14 -sC -sV -oN nmap/initial With that command, Nmap will use scripts and version enumeration to scan all…

VaxRegister was a challenge during the Siemens Future Minds CTF. The challenge was a web application, which is used to track COVID infections. Vulnerability The vulnerable endpoint was /api/enroll. The endpoint will call addRecord-Function: The addRecord function will check for the user supplied input and will set the column of a…