HackTheBox - Shoppy

Name: HackTheBox - Shoppy
Uploaded: 2023-01-14T15:00:10Z
Channel: IppSec
Description: 00:00 - Intro 01:00 - Start of nmap 01:55 - Taking a look at the web page 02:30 - Discovering it is NodeJS based upon the error message [MasterRecon] 03...

IppSec · Beginner ·🔐 Cybersecurity ·3y ago

00:00 - Intro 01:00 - Start of nmap 01:55 - Taking a look at the web page 02:30 - Discovering it is NodeJS based upon the error message [MasterRecon] 03:40 - Performing NoSQL boolean injection (mongodb) to bypass authentication 06:45 - Working payload for the NoSQL Injection. 09:30 - Dumping the user database with more NoSQL Injection and using CrackStation to get the password 12:00 - Using ffuf to find the mattermost.shoppy.htb subdomain 14:20 - Logging into MatterMost and getting a credential 15:50 - Log in as the Jaeger user and use strings to get a hardcoded password from the password-mana…

Watch on YouTube ↗ (saves to browser)

Chapters (12)

Intro

1:00 Start of nmap

1:55 Taking a look at the web page

2:30 Discovering it is NodeJS based upon the error message [MasterRecon]

3:40 Performing NoSQL boolean injection (mongodb) to bypass authentication

6:45 Working payload for the NoSQL Injection.

9:30 Dumping the user database with more NoSQL Injection and using CrackStation to

12:00 Using ffuf to find the mattermost.shoppy.htb subdomain

14:20 Logging into MatterMost and getting a credential

15:50 Log in as the Jaeger user and use strings to get a hardcoded password from the

20:20 SSH into the box as the Deploy User, discover we can run Docker commands and u

24:00 Exploring the Password-Manager binary in Ghidra

Playlist

Uploads from IppSec · IppSec · 0 of 60

← Previous Next →