/ Recent content on Akshay's blog Hugo en Wed, 21 May 2025 00:56:12 +0530 /posts/alert/ Wed, 21 May 2025 00:56:12 +0530 /posts/alert/ This is my writeup for the alert hackthebox machine Machine path admin contact xss-> lfi-> get creds using lfi ->root user running php server-> rce in that php app ┌──(root💀kali-linux-2021-3)-[~/Desktop/htb/alert] └─# nmap 10.10.11.44 -sCV | tee nmap.log Starting Nmap 7.94SVN ( https://nmap.org ) at 2024-11-25 11:55 IST Stats: 0:00:20 elapsed; 0 hosts completed (1 up), 1 undergoing Script Scan NSE Timing: About 99.30% done; ETC: 11:55 (0:00:00 remaining) Nmap scan report for 10. /posts/shoppy-writeup/ Sat, 24 Sep 2022 16:53:57 +0530 /posts/shoppy-writeup/ Nmap scan : opening http://10.10.11.180 redirected to shoppy.htb adding shoppy.htb to /etc/hosts gobuster scan : /login/ It is vulnerable to SQL injection username : admin'||' password : '1234' Searching for users using ffuf ffuf -w /usr/share/wordlists/dirbuster/Seclists/Discovery/Web-Content/big.txt -H “Cookie: connect.sid=s%3AQ_DzTywBWfkL-cMtYRlM_-1pjQWoOIAu.BMY48SawD9WHW%2 By9ffv355b9jyKAcgxT6Mq%2Bm7frzPQ” -u [http://shoppy.htb/admin/search-users**?**username=FUZZ](http://shoppy.htb/admin/search-users?username=FUZZ) — fs 2561 -t 50 This gave /export/exports.json with *admin and josh credentials * Cracking josh’s hash josh:remembermethisway Searching for subdomains : ffuf -H "Host: FUZZ.shoppy.htb" -w /usr/share/seclists/Discovery/DNS/bitquark-subdomains-top100000. /posts/neonify-writeup/ Tue, 21 Jun 2022 00:56:12 +0530 /posts/neonify-writeup/ Challenge Description : Name : neonify Difficulty : Easy Points : 20 “ It’s time for a shiny new reveal for the first-ever text neonifier. Come test out our brand new website and make any text glow like a lo-fi neon tube!“ What’s This? The website takes input from the user and styles it in neon Looking at the code Shows it runs ruby in the backend and checks for the user input using regex is between a-z and 0–9.