JWT » THOVITI SIDDHARTH

JWT

March 9, 2024

AppSanity – HackTheBox Writeup

Thoviti Siddharth HackTheBox, Infosec ASPX, chisel, DLL Hijacking, dnSpy, ffuf, HackTheBox, HTB, JWT, metasploit, meterpreter, Session Hijacking, SSRF, Windows 0

Machine Name: AppSanity
IP: 10.10.11.238
Difficulty: Hard

Summary

AppSanity is a hard difficulty machine that starts with subdomain enumeration and manipulation of the registration process. Utilizing JWT for session hijacking, the journey led to SSRF and finally gaining a user shell through bypassing file-type restrictions. For privilege escalation, analysis of the ExaminationManagement.dll revealed a registry key, providing user credentials. Reverse port forwarding via Chisel unveiled the service on port 100, enabling exploitation of DLL hijacking to escalate privileges and eventually access administrator shell and root flag.

June 9, 2022

Noter – HackTheBox Writeup

Thoviti Siddharth HackTheBox, Infosec burp-intruder, Flask, FTP, HackTheBox, HTB, htb-noter, Infosec, JWT, Linux Box, MySQL, user-enumeration, Writeup 0

Machine Name: Noter
IP: 10.10.11.140
Difficulty: Medium

Summary

Noter is a machine that expects basic enumeration to lead to session cookies, JWT secrets, and credentials to servers. It teaches code review, and identification of code injections. Privilege Escalation was fairly simple as it was achieved with a public exploit that required credentials obtained during enumeration. The exploit allowed command execution as root through MySQL to gain a root shell.