Search for a command to run...
Series
The series will primarily consist of walkthroughs for the skill assessments in HackTheBox’s Bug Bounty Hunter path modules.
Scenario You are contracted to perform a penetration test for a company, and through your pentest, you stumble upon an interesting file manager web application. As file managers tend to execute system commands, you are interested in testing for comma...
Scenario You are tasked to perform a security assessment of a client's web application. For the assessment, the client has not provided you with credentials. Apply what you have learned in this module to obtain the flag. Walkthrough Navigate to the t...
Scenario Our client tasks us with assessing a SOAP web service whose WSDL file resides at http://<TARGET IP>:3002/wsdl?wsdl. Assess the target, identify an SQL Injection vulnerability through SOAP messages and answer the question below. Submit the pa...
Scenario - Part 1 The first part of the skills assessment will require you to brute-force the the target instance. Successfully finding the correct login will provide you with the username you will need to start Skills Assessment Part 2. You might fi...
Scenario To complete the skills assessment, answer the questions below. You will need to apply a variety of skills learned in this module, including: Using whois Analysing robots.txt Performing subdomain bruteforcing Crawling and analysing result...
Scenario During our Penetration Test, we came across a web server that contains JavaScript and APIs. We need to determine their functionality to understand how it can negatively affect our customer. Walkthrough Q1 - Try to study the HTML code of the ...
