Web Server Attacks - I (TryHackMe)
Link to the Walkthrough in TryHackMe - Web Server Attacks - I Introduction During a penetration test, you will almost always run into at least one web server. Sometimes it is a production Apache site

Search for a command to run...
Articles tagged with #gobuster
Link to the Walkthrough in TryHackMe - Web Server Attacks - I Introduction During a penetration test, you will almost always run into at least one web server. Sometimes it is a production Apache site

TopTierConversions LTD released MD2PDF, a tool designed to convert Markdown documents into PDF quickly and securely—or so they claimed. As part of this challenge, we were tasked with testing the service for weaknesses. At first glance, it seemed simp...

In this challenge, we explore a vulnerable cloud authentication service called Authentication Anywhere — a fictional login platform promising secure access from anywhere. But is it truly secure? 🤔 With the mention of IDOR (Insecure Direct Object Ref...
Welcome to ToysRus, a beginner-friendly CTF room designed to introduce essential enumeration and exploitation tools commonly used in penetration testing. In this challenge, we leverage tools like Nmap, Gobuster, Hydra, Nikto, and Metasploit to uncove...

Welcome to Lian_YU, a beginner-friendly CTF box with an Arrowverse theme. While the storyline and references might feel familiar to fans of the Arrow series, prior knowledge isn't required to complete the challenge. The goal is simple: enumerate thor...

Welcome to the "Year of the Rabbit" — a lighthearted CTF-style box that offers a balanced mix of enumeration, basic exploitation, steganography, and privilege escalation to warm up your hacking skills for the new year. In this walkthrough, we’ll use ...
