Skills Directory
Claude Skills by Anchovy317
github.com/Anchovy317Run a sub-domain/vhost fuzzing scan on '*.academy.htb' for the IP shown above. What are all the sub-domains you can identify? (Only write the sub-domain name) 1. Before you run your page fuzzing scan, you should first run an extension fuzzing scan. What are the different extensions accepted by the domains? ```sh ffuf -w /usr/share/seclists/Discovery/DNS/subdomains-top1million-5000.txt:FUZZ -u http://academy.htb:$PORT/ -H 'Host: FUZZ.academy.htb' -fs 985 /'___\ /'___\ /'___\ ...
We can see the injection is in the move file   And in the section form we must to change for us payload: `%3bc'a't${IFS}${PATH:0:1}..${PATH:0:1}..${PATH:0:1}..${PATH: 0:1}..${PATH:0:1}flag.txt;`  https://academy.hackthebox.com/achievement/349590/109
We are performing a Web Application Penetration Testing task for a company that hired you, which just released their new Security Blog. In our Web Application Penetration Testing plan, we reached the part where you must test the web application against Cross-Site Scripting vulnerabilities (XSS). Start the server below, make sure you are connected to the VPN, and access the /assessment directory on the server using the browser: 1. Identify a user-input field that is vulnerable to an XSS vulner...
The company INLANEFREIGHT has contracted you to perform a web application assessment against one of their public-facing websites. They have been through many assessments in the past but have added some new functionality in a hurry and are particularly concerned about file inclusion/path traversal vulnerabilities. They provided a target IP address and no further information about their website. Perform a full assessment of the web application checking for file inclusion and path traversal vuln...
IP : 83.136.252.13:58188 - Try to fuzz for non-blacklisted extensions, and for allowed content-type headers. If you are unable to locate the uploaded files, try to read the source code to find the uploads directory and the naming scheme. We can see the can upload the image. Fist we upload the payload xml for see the upload.php code:  we must decode the in cyberchef: ```php <?php require_once('./common-functions.php'); // uploaded files directory $target_dir ...
- What is the password for the basic auth login? - After successfully brute forcing the login, what is the username you have been given for the next part of the skills assessment? [IP: 83.136.254.243:56064] We use hydra for the first task: After see the error [[ERROR] the target is using HTTP auth, not a web form, received HTTP error code 401. Use module "http-get" instead.] we can use [hydra -l admin -P Dictionaries/rockyou.txt 83.136.254.243 http-get / -s 56064] ```sh hydra -L Dictionarie...
The company inlanfreitgh has contracted to perform web app assesments against one of their public-facing website. In light of a recent breach of one of their main competitors, they are particulary concerned with SLQ injection vulnerability and the damaga dicovery ans susscessful explotation of this attack could do to their public image and bottom line.
```html <!doctype html> <html class="no-js" lang="en"> <head> <meta charset="utf-8"> <title>Rogue Pickings</title> <meta name="description" content=""> <meta name="viewport" content="width=device-width, initial-scale=1"> <meta property="og:title" content=""> <meta property="og:type" content=""> <meta property="og:url" content=""> <meta property="og:image" content=""> <link rel="apple-touch-icon" href="icon.png"> <!-- Place favicon.ico in the root directory --> <link rel="stylesheet" href="css...
Performing a web app pentest for sof comanpym and task y iwth testing the lastest of their social network web app. Try to escalate your privileges and exploit different vulnerabilities to read the flag at '/flag.php'.