Posts tagged with

PostgreSQL

HackTheBox - CozyHosting Writeup

CozyHosting is an easy Hack The Box Linux machine running a Spring Boot app with exposed Actuator endpoints. Session hijacking grants dashboard access, and a command injection vulnerability provides a reverse shell. Hardcoded credentials in the JAR file reveal a database hash, which, once cracked, allows SSH access as josh. The user can run ssh as root, leading to full privilege escalation.

S SH∆FIQ∆IM∆N
February 23, 2025
1 min read

spring-boot-error spring-boot gobuster PostgreSQL hashcat GTFOBins
HackTheBox - Vaccine Writeup

Starting Point Machine

S SH∆FIQ∆IM∆N
July 21, 2021
1 min read

sqlmap sql-union sqli GTFOBins ftp rce zip2john john crackstation python PostgreSQL