In the PC box from HackTheBox, there's a GRPC server that I'll exploit to get a foothold. In this video, I'll look at the Python code used to make the server and understand how it works.
HackTheBox PC: https://www.hackthebox.com/machines/pc
PC Blog Post: https://0xdf.gitlab.io/2023/10/07/htb...
☕ Buy Me A Coffee: https://www.buymeacoffee.com/0xdf
[00:00] Introduction
[00:32] GRPC Background / QuickStart
[01:18] Looking at generated files
[03:10] middle.py
[03:26] app.py
[04:42] SQL injection analysis
[05:34] Conclusion
#pentest #ctf #bugbounty