HACK THE BOX | STOCKER | Web Exploitation and API Abuse
In this video, I'll walk you through our experience solving the "Stocker" challenge on Hack the Box.
During this challenge, we learned about how to exploit a web application by abusing its API. We discovered vulnerabilities in the application that allowed us to escalate our privileges and gain access to sensitive data.
Also, we have deal with the Basic Authentication bypass with the OG Hatricks cheat sheet where we pass the manipulated JSON while login.
Useful link: https://book.hacktricks.xyz/pentestin...
Brandenburg Concerto No4-1 BWV1049 - Classical Whimsical by Kevin MacLeod is licensed under a Creative Commons Attribution 4.0 license. https://creativecommons.org/licenses/...
Source: http://incompetech.com/music/royalty-...
Artist: http://incompetech.com/