#credential-reuse

Articles tagged with #credential-reuse

HackSmarter - Casino Writeup
Summary Casino is a Flask-based "Guest WiFi & Portal" resort captive portal. A leaked JS source-map exposes an unauthenticated internal API endpoint (/api/v1/rooms/status) that dumps the entire guest
Aug 25, 202611 min read21
Hackthebox: Forgotten Writeup
Summary Forgotten is a HckTheBox machine centered around an exposed LimeSurvey installer endpoint that was never properly secured post-deployment. By spinning up a rogue MySQL server, an attacker can
Jun 20, 20266 min read4