https://www.netwalker.com.br/blog en-us souzagabriel.bsb@gmail.com (Gabriel Souza) souzagabriel.bsb@gmail.com (Gabriel Souza) Thu, 14 Nov 2024 00:00:00 GMT https://www.netwalker.com.br/blog/cap-writeup https://www.netwalker.com.br/blog/cap-writeup The application has the following vulnerabilities: endpoint enumeration via FUZZ, SQL Injection, remote command execution (RCE), and privilege escalation via Linux capabilities. Thu, 14 Nov 2024 00:00:00 GMT souzagabriel.bsb@gmail.com (Gabriel Souza) API RESTSQLIIDORLinuxHacking Club https://www.netwalker.com.br/blog/guardian-writeup https://www.netwalker.com.br/blog/guardian-writeup Machine involving SQL Injection, code injection, and reversing (PE). Sun, 16 Jun 2024 00:00:00 GMT souzagabriel.bsb@gmail.com (Gabriel Souza) SQLICODE INJECTIONLinuxHacking Club https://www.netwalker.com.br/blog/lion-writeup https://www.netwalker.com.br/blog/lion-writeup The Lion machine is vulnerable to SQL injection, allowing RCE through the upload of a webshell, and has privilege escalation via cron jobs. Thu, 07 Nov 2024 00:00:00 GMT souzagabriel.bsb@gmail.com (Gabriel Souza) SQLIRCELinuxHacking Club https://www.netwalker.com.br/blog/paradize-writeup https://www.netwalker.com.br/blog/paradize-writeup On the Paradize machine, we need to exploit an SQL injection to upload a webshell and explore a path hijacking vulnerability. Sat, 30 Nov 2024 00:00:00 GMT souzagabriel.bsb@gmail.com (Gabriel Souza) SQLILinuxHacking Club https://www.netwalker.com.br/blog/vocateer-writeup https://www.netwalker.com.br/blog/vocateer-writeup Máquina sobre Broken Access Control, BOLA, SQL Injection e linux capabilities. Sat, 04 Jan 2025 00:00:00 GMT souzagabriel.bsb@gmail.com (Gabriel Souza) BOLASQLILinuxHacking Club