Web Security

Home /
Categories /
Web Security

HTB - Cap Writeup

Suhesh Kasti
Cybersecurity , Web security

Cap is an easy difficulty Linux machine running an HTTP server that performs administrative functions including performing network captures. Improper controls result in Insecure Direct Object Reference (IDOR) giving access to another user's capture. The capture contains plaintext credentials and can be used to gain foothold. A Linux capability is then leveraged to escalate to root.

SQL Injection for Scummies

Suhesh Kasti
Cybersecurity , Web security

Learn everything about SQL injection attacks - from basic concepts to advanced exploitation techniques and prevention methods. A comprehensive guide for cybersecurity enthusiasts.