IDOR Vulnerability on JobsDB
PII disclosure through an IDOR vulnerabiilty on recruitment site.
PII disclosure through an IDOR vulnerabiilty on recruitment site.
Discover an OpenNetAdmin instance through routine enumeration, and escalate your privileges using recycled credentials and some pivoting techniques.
Bashed is another classic Linux machine on HackTheBox, and can be pwned easily after some careful observations.
After spending a bit of time on HackTheBox's starting ground machines, it's time to root my first machine without hints as I begin to prepare myself for my OSCP!
Gain a foothold on this machine with cleartext credentials through an IDOR, followed by privilege escalation via files with improperly configured capabilities.