We even found a hidden login system

On the network side.... let me scan the ip address with nmap and see what services it has open

Now that we have a special ip address then lets scan it

We have discovered 5 open port

There's a vulnerability that we can exploit to take over the database or at least crash it

There is also a host header injection vulnerability: passing an invalid host header and getting a 200 ok

We can use that to reset another users password , poison the web content of the website

We will stop there for tonight...any attack is illegal ...this is for educational purpose only

How to Hack the "Hackthebox" page to get an invite code

Write-up on our website 👇🏽

https://seehowtv.com/join/33

54 68 69 73 20 49 53 50 20 69 73 20 73 6c 6f 77 20 61 73 66 20 2e 2e 2e 2e 61 6e 64 20 69 74 27 73 20 6f 77 6e 65 64 20 62 79 20 61 20 6e 69 67 65 72 69 61 6e 20 2e 2e 2e 38 35 33 32 39 36 37 37 34 30 37 36 37 34 30

SXQncyBhbG1vc3QgMjAyMSAsIHdobyB1c2VzIGdsbyBhcyBJU1AgPy4uIDg1MzI5NjQ2OTUzOTYxMw==

00000000 4f 68 20 63 6f 6d 6d 6f 6e 20 2e 2e 2e 20 4c 65 |Oh common ... Le|
00000010 74 27 73 20 74 61 6b 65 20 69 74 20 75 70 20 61 |t's take it up a|
00000020 20 6e 6f 74 63 68 20 2e 2e 38 35 33 32 39 2e 73 | notch ..85329.s|
00000030 74 69 6c 6c 20 67 6c 6f 20 2e 36 35 33 33 36 35 |till glo .653365|
00000040 35 33 35 38 |5358|