00:00 - Introduction
00:50 - Start of nmap
04:30 - Discovering a potential XSS in the Notes field of an order. Content Security Policy (CSP) blocks us, because JS cannot be on the same page. Looking for a file upload functionality.
08:29 - Finding out we can upload anything we want to the avatar. This should allow us to bypass the CSP in the book edit field
11:55 - Confirmed XSS on the page, checking if there’s an IDOR Vulnerability that allows us to add notes to other people’s items by creating a second account
16:00 - Creating a Python Script that will automatically poison items in peoples basket (cart)
28:00 - Backet Poisoner script is completed
28:50 - Creating a JavaScript payload, explaining why I’m doing await, fetch, and helper functions.
40:15 - Having the XSS Payload fetch profile, look for orders, then perform a get on all orders to examine the order page. Then send us the HTML of that page
49:55 - Creating a Python Flask Server that will save all of the orde
1 view
523
126
2 months ago 00:33:44 1
Best Hacking Laptop 2023
2 months ago 00:27:16 1
Top Hacking Books for 2023
2 months ago 02:00:43 1
hack the box
2 months ago 00:20:43 1
Расследую инцидент взлома | #HackTheBox | КАК ПРОЙТИ #
2 months ago 00:36:09 1
Прохождение #Linux-машины , сложного уровня | #HackTheBox | КАК ПРОЙТИ #
2 months ago 00:30:39 1
Прохождение Linux-машины средней сложности SANDWORM HackTheBox | КАК ПРОЙТИ
3 months ago 00:13:24 1
Прохождение задания UNDER CONSTRUCTION на Google CTF 2023 | КАК ПРОЙТИ UNDER CONSTRUCTION GOOGLE CTF
3 months ago 11:21:04 1
Bug Bounty Course 2024 Updated
3 months ago 07:22:03 1
Ultimate Guide to Ethical Hacking with Kali Linux #ethicalhacking #hacker
3 months ago 00:41:25 4
HackTheBox - Visual
4 months ago 05:30:24 3
George Hotz | Programming | Hack The Box | ctf practice for skill (should tomcr00se return?)
4 months ago 01:02:06 14
HackTheBox Zipping
4 months ago 00:16:21 18
HackTheBox - Sau
4 months ago 02:09:39 12
HackTheBox - Coder
5 months ago 00:15:02 1
Решение машины #topology на #hackthebox
5 months ago 00:13:41 1
Решение машины #cozyhosting на #hackthebox
6 months ago 00:46:30 1
Tier 0: HackTheBox Starting Point - 5 Machines - Full Walkthrough (for beginners)