https://www.netwalker.com.br/blog en-us souzagabriel.bsb@gmail.com (Gabriel Souza) souzagabriel.bsb@gmail.com (Gabriel Souza) Thu, 14 Nov 2024 00:00:00 GMT https://www.netwalker.com.br/blog/cap-writeup https://www.netwalker.com.br/blog/cap-writeup The application has the following vulnerabilities: endpoint enumeration via FUZZ, SQL Injection, remote command execution (RCE), and privilege escalation via Linux capabilities. Thu, 14 Nov 2024 00:00:00 GMT souzagabriel.bsb@gmail.com (Gabriel Souza) API RESTSQLIIDORLinuxHacking Club https://www.netwalker.com.br/blog/iNotes-writeup https://www.netwalker.com.br/blog/iNotes-writeup This is a HackingClub championship machine where we found an IDOR that provides initial access and Privilege Escalation through XAMPP. Wed, 13 Nov 2024 00:00:00 GMT souzagabriel.bsb@gmail.com (Gabriel Souza) IDORWindowsHacking Club