Explore this detailed walkthrough of Hack The Box Academy’s Cross Site Scripting module. Learn effective techniques to exploit Cross Site Scripting (XSS) vulnerabilities. Overview: We are perf...

Explore this detailed walkthrough of Hack The Box Academy’s Javascript Deobfuscation module. Learn effective techniques to decode obfuscated scripts. Overview: You are given an online academy’...

Explore this detailed walkthrough of Hack The Box Academy’s Attacking Web Applications with Ffuf module. Learn effective techniques to leverage Ffuf for web application attacks. Overview: You ...

Explore this detailed walkthrough of Hack The Box Academy’s Information Gathering Skills Assessment module. Learn effective techniques to perfom a successful recon. Overview: To complete the s...

Lab 2 - High-level logic vulnerability Lab Objective: This lab doesn’t adequately validate user input. You can exploit a logic flaw in its purchasing workflow to buy items for an unintended pri...

Lab 1 - Excessive trust in client-side controls Lab Objective: This lab doesn’t adequately validate user input. You can exploit a logic flaw in its purchasing workflow to buy items for an unint...

Lab 3 - Blind OS command injection with output redirection Lab Objective: This lab contains a blind OS command injection vulnerability in the feedback function. The application executes a shell...

Lab 2 - Blind OS command injection with time delays Lab Objective: This lab contains a blind OS command injection vulnerability in the feedback function. The application executes a shell comman...

Lab 1 - OS Command Injection - Simple Case Lab Objective: This lab contains an OS command injection vulnerability in the product stock checker. The application executes a shell command containi...

Introduction OS Command Injection is a vulnerability that consists of an attacker executing commands on the host operating system via a vulnerable application. Reference: Rana Khalil Academy ...