There's a vulnerability that we can exploit to take over the database or at least crash it

There is also a host header injection vulnerability: passing an invalid host header and getting a 200 ok

We can use that to reset another users password , poison the web content of the website

We will stop there for tonight...any attack is illegal ...this is for educational purpose only

How to Hack the "Hackthebox" page to get an invite code

Write-up on our website 👇🏽

https://seehowtv.com/join/33

54 68 69 73 20 49 53 50 20 69 73 20 73 6c 6f 77 20 61 73 66 20 2e 2e 2e 2e 61 6e 64 20 69 74 27 73 20 6f 77 6e 65 64 20 62 79 20 61 20 6e 69 67 65 72 69 61 6e 20 2e 2e 2e 38 35 33 32 39 36 37 37 34 30 37 36 37 34 30

SXQncyBhbG1vc3QgMjAyMSAsIHdobyB1c2VzIGdsbyBhcyBJU1AgPy4uIDg1MzI5NjQ2OTUzOTYxMw==

00000000 4f 68 20 63 6f 6d 6d 6f 6e 20 2e 2e 2e 20 4c 65 |Oh common ... Le|
00000010 74 27 73 20 74 61 6b 65 20 69 74 20 75 70 20 61 |t's take it up a|
00000020 20 6e 6f 74 63 68 20 2e 2e 38 35 33 32 39 2e 73 | notch ..85329.s|
00000030 74 69 6c 6c 20 67 6c 6f 20 2e 36 35 33 33 36 35 |till glo .653365|
00000040 35 33 35 38 |5358|

TXRuIDIzMDQ1MDY1NTY5MDE0Mjcx

56 46 68 53 64 55 6c 45 5a 7a 4a 4e 65 6b 55 78 54 6d 70 52 4e 45 31 71 51 54 42 4e 61 6b 6b 78 54 57 70 6e 4d 69 42 76 61 32 46 35 49 48 6c 76 64 53 42 6e 62 33 51 67 62 57 55 67 4c 69 34 75 4c 67 3d 3d

JJBFCWCNGJGE6TJUKFDUGSKEJFGUMWSHJFEUIVKOIZLVOS2JIRBE4US2I5FVSTCFKBCVCRBWJFBVQTKVKFDUGNCUIZCUEVSIJM2DGVKFIJKFOSZVIRKU4RSYI5HUSRCUJ5JFCWCFGVCEMTKRKFEEONKMIRHE4U2YIVEUEQKGLFMEGNCUJNKUUWKRIM2EYUSPI5MTEVCBJZNFIR2BGJKEWT2KLJDUCNCUJ5HFUVSHKVMVGQKMKJHUMWKYI5LVUTC2IVBFKWCHJFBFKR2NLJCEOPJ5HU======

Well let's take it up a notch ....

Join US 👇👇 👺👺

U2FsdGVkX1+i7J0AddE+UCefPvnTN80iQXYdCuUSP7h5F+q1ddiHLzF7v+GwLdjQ
oQWR95x6lKaaAqhKgBKpiz5WXgUfSTwdK4CU+Mw1j/o=



The price is off. ....
Hint :

https://crypto.stackexchange.com/questions/8776/what-is-u2fsdgvkx1

Good evening guys