And boom we have a bunch of internal ip addresses

See that we are moving from knowing no doors to knowing some semi protected doors to finding hidden doors

Now you should see it has services that we can check for vulnerabilities

We even found a hidden login system

On the network side.... let me scan the ip address with nmap and see what services it has open

Now that we have a special ip address then lets scan it

We have discovered 5 open port

There's a vulnerability that we can exploit to take over the database or at least crash it

There is also a host header injection vulnerability: passing an invalid host header and getting a 200 ok

We can use that to reset another users password , poison the web content of the website

We will stop there for tonight...any attack is illegal ...this is for educational purpose only

How to Hack the "Hackthebox" page to get an invite code

Write-up on our website 👇🏽

https://seehowtv.com/join/33

54 68 69 73 20 49 53 50 20 69 73 20 73 6c 6f 77 20 61 73 66 20 2e 2e 2e 2e 61 6e 64 20 69 74 27 73 20 6f 77 6e 65 64 20 62 79 20 61 20 6e 69 67 65 72 69 61 6e 20 2e 2e 2e 38 35 33 32 39 36 37 37 34 30 37 36 37 34 30

SXQncyBhbG1vc3QgMjAyMSAsIHdobyB1c2VzIGdsbyBhcyBJU1AgPy4uIDg1MzI5NjQ2OTUzOTYxMw==