Directory Traversal / File Read Into Zip with Python [HackTheBox Snoopy]
In Snoopy from HackTheBox, I have a directory traversal / file read vulnerability in the website, but when the file comes back, it's inside a zip archive. I'll write a quick Python script that takes a file path and optional save location, gets the file, reads it from the zip, and then either prints it to the screen or saves it to a file.
Full Snoopy Blog Post: https://0xdf.gitlab.io/2023/09/23/htb...
HTB Snoopy: https://www.hackthebox.com/machines/s...
☕ Buy Me A Coffee: https://www.buymeacoffee.com/0xdf
[00:00] Introduction
[00:49] Demonstrating the vulnerabity
[02:22] Starting Python, handling input
[03:38] Getting file
[04:18] Showing ways to debug
[06:00] Unzipping file
[08:38] Adding download option
[10:50] Conclusion
#pentest #ctf #bugbounty