ArticleSQL injection attack, listing the database contents on Oracle
SQL injection attack, listing the database contents on Oracle: The product category filter is vulnerable to SQL injection. Results are reflected in t…
Knowledge base
Blog
Practical security research, write-ups, guides, and lessons learned.
- 199
- Entries
Explore
Blog Posts
Article
ArticleSQL injection attack, listing the database contents on non-Oracle databases
SQL injection attack, listing the database contents on non Oracle databases: The product category filter is vulnerable to SQL injection and reflects…
ArticleSQL injection UNION attack, determining the number of columns returned by the query
SQL injection UNION attack, determining the number of columns returned by the query: The category filter is vulnerable to SQL injection and reflects…
ArticleHTB Academy - Web Enumeration
HTB Academy Web Enumeration: Run quick web enumeration against the target, pivot from findings to auth, and grab the flag. • HTB Academy • enumeratio…
ArticleHTB Academy - Get started
HTB Academy Get started: Build a practical, deep understanding of the Nmap flags you actually use during HTB/CTF and real engagements, then connect t…
ArticleHTB Academy Firewall and IDS/IPS Evasion - Medium Lab
HTB Academy Firewall and IDS/IPS Evasion Medium Lab: After we conducted the first test and submitted our results to our client, the administrators ma…
ArticleHTB Academy - Firewall and IDS/IPS Evasion - Hard Lab
HTB Academy Firewall and IDS/IPS Evasion Hard Lab: Re run web enumeration to identify the exact version of the service your client cares about (DNS o…
ArticleHTB Academy Firewall and IDS/IPS Evasion - Easy Lab
HTB Academy Firewall and IDS/IPS Evasion Easy Lab: Identify the operating system running on the target that sits behind IDS/IPS controls, and submit…
ArticleHTB Academy - nmap scanning basics
HTB Academy nmap scanning basics: Nmap Enumeration & Vulnerability Assessment The objective was divided into two tasks: 1. Find all TCP ports on your…
ArticleHTB Academy nmap network performance
HTB Academy nmap network performance: Nmap Scanning Performance Optimization • HTB Academy • nmap
ArticleHTB Academy - NSE Scripts
HTB Academy NSE Scripts: Use Nmap Scripting Engine (NSE) to enumerate a target, discover interesting HTTP paths, and recover the flag. I played with…
ArticleHTB Academy - Service Enumeration
HTB Academy Service Enumeration: Enumerate all ports/services on the host and extract the flag exposed by one of the services. • HTB Academy • htb ac…