Reconnaissance As usually we gonna scan the target with the nmap └──╼ $sudo nmap -sS -sV -sC -T4 --min-rate 5000 10.10.14.231 -vv ... Discovered open port 21/tcp on 10.10.14.231 Discovered open port 445/tcp on 10.10.14.231 Discovered open port 22/tcp...
Alright, simple CTF is a beginner level CTF on tryhackme that teaches necessary skills for all CTFs, including scanning and enumeration, research, exploitation, and privilege escalation. Room URL Scanning As always we start by scanning the target mac...
Introduction: Room This room breaks each OWASP topic down and includes details on the vulnerabilities, how they occur, and how you can exploit them. You will put the theory into practice by completing supporting challenges. Broken Access Control C...
Enumeration First thing we are going to gather information about the target system PC that has been assigned an IP address of 10.10.11.214 using Nmap. I like to use -vv option to learn about the ports while Nmap scans the target system. sudo nmap -sV...
Brief SQL Injection, commonly known as SQLi, involves executing malicious queries on a web application database server. When a web application fails to validate user input before interacting with the database, it becomes vulnerable to attackers who m...
Introduction (What is Command Injection?) In this section, we'll explore the web vulnerability known as command injection. We'll learn about its nature, understand its impact, and the risks it poses to applications. Subsequently, you'll have the oppo...
