Mongod How many TCP ports are open on the machine? 2 Which service is running on port 27017 of the remote host? $ nmap -sV -p- <ip> ... PORT STATE SERVICE VERSION 22/tcp open ssh...
🔵 HTB - Explosion
Explosion What does the 3-letter acronym RDP stand for? Remote Desktop Protocol What is a 3-letter acronym that refers to interaction with the host through a command line interface? cli What a...
🕸️ PSA - Auth 1 - Username enumeration via different responses
Difficulty: Apprentice 🎯 Goal This lab is vulnerable to username enumeration and password brute-force attacks. It has an account with a predictable username and password. To solve the lab, enume...
🕸️ PSA - SQLi 11 - Blind SQLi with conditional responses
Difficulty: Practitioner 🎯 Goal This lab contains a blind SQLi vulnerability. The application uses a tracking cookie for analytics, and performs a SQL query containing the value of the submitted ...
🕸️ PSA - SQLi 10 - Listing contents on Oracle DB
Difficulty : Practitioner 🎯 Goal This lab contains a SQL injection vulnerability in the product category filter. The results from the query are returned in the application’s response so you can u...
🕸️ PSA - SQLi 9 - Listing contents on non-Oracle DB
Difficulty : Practitioner 🎯 Goal This lab contains a SQL injection vulnerability in the product category filter. The results from the query are returned in the application’s response so you can u...
🕸️ PSA - SQLi 8 - Querying DB type and version on MySQL and Microsoft
Difficulty : Practitioner 🎯 Goal To solve the lab, display the database version string. ✅ Solution We know it is a MySQL or Microsoft database so we will have to try different comment symbol...
🕸️ PSA - SQLi 7 - UNION attack, querying the database type and version on Oracle
Difficulty : Practitioner 🎯 Goal To solve the lab, display the Oracle database version string. ✅ Solution On Oracle, every SELECT query must use the FROM keyword and specify a valid table. T...
🕸️ PSA - SQLi 6 - UNION attack, retrieving multiple values in a single column
Difficulty : Practitioner 🎯 Goal The database contains a new table called users, with columns called username and password. To solve the lab, perform a SQL injection UNION attack that retrieves ...
🕸️ PSA - SQLi 5 - UNION attack, retrieving data from other tables
Difficulty : Practitioner 🎯 Goal The database contains a new table called users with columns username and password inside. To solve the lab, perform a SQL injection UNION attack that retrieves a...