HackTheBox
Begin by adding the target machine IP to /etc/hosts. nano /etc/hosts sudo nmap -sV -sC valentine.htb I also conducted an NSE script scan against the vulnerable target. sudo nmap -sV --script=vuln valentine.htb --max-rate=10000 Meanwhile, directory fuzzing also proved useful. dirsearch -u http://valentine.htb
Begin with binding machine IP to custom domain. Conduct port scanning sudo nmap -sV -sC curling.htb Let's check Joomla: There were nothing valuable in this page. I also conducted a port scan with --script=vuln NSE engine. sudo nmap -sV --script=vuln --max-rate=10000 curling.htb It
I discovered a critical vulnerability (CVSS3.1 10.0) in NocoBase's Workflow Script Node that allows an authenticated attacker to escape the Node.js vm sandbox and achieve Remote Code Execution as root with a single HTTP request. * CVE: CVE-2026-34156 * Advisory: GHSA-px3p-vgh9-m57c * Severity: Critical: CVSS:3.1 10.
Bind machine IP to domain. Conduct port scan: sudo nmap -sV -sC beep.htb sudo nmap -sV -p- --max-rate 10000 beep.htb Including Login Page and sounds interesting, I could not connect through port 80 or 443, but nmap highlights HTTPS. Changing TLS version support worked in my browser. In
“CTIS363 case study for responsible disclosure, institutional accountability, professional moral rules examined through five ethical norms.” Introduction Responsible disclosures as its innate structure clarifies “A great ethics” “A Full Moral Activity”. However, frequently, it sits at one of the most uncomfortable intersections in information security. Whether it is a good
Reconnaissance Add machine IP to the hosts file. Conduct a port scan against irked.htb: sudo nmap -sV -p- --max-rate 10000 irked.htb Well, I'll check the web server directly -> I don't have background knowledge about IRC. That is why, let's check.