SQL Injection Fundamentals | Hack The Box AcademyConnect to the database using the MySQL client rom the command line. Use the 'show databases;' command to list databases in the DBMS. What is the name of the first database? mysql -h target_ip -P port4d ago · 5 min readashleyjovanska.hashnode.dev
Cross-Site Scripting (XSS) | Hack The Box AcademyInteractive Sessions & Skill Assessment Section 2/10 To get the flag, use the same payload we used above, but change its JavaScript code to show the cookie instead of showing the url. Note: After tySep 25 · 6 min readashleyjovanska.hashnode.dev
Javascript Deobfuscation | Hack The Box AcademyInteractive Sessions & Skill Assessment Repeat what you learned in this section, and you should find a secret flag, what is it? Open a web browser > Navigate to target URL > Right click -> Inspect pJul 19 · 4 min readashleyjovanska.hashnode.dev
Web Fuzzing | Hack the Box AcademyInteractive Sessions & Skill Assessment Within the "webfuzzing_hidden_path" path on the target system (ie http://IP:PORT/webfuzzing_hidden_path/), fuzz for folders and then files to find the flag. FJul 16 · 6 min readashleyjovanska.hashnode.dev
Information Gathering - Web Edition | Hack The Box AcademyInteractive Sessions & Skill Assessment. Perform a WHOIS lookup against the paypal.com domain. What is the registrar Internet Assigned Numbers Authority (IANA) ID number? whois paypal.com What is Jul 10 · 9 min readashleyjovanska.hashnode.dev
