xsspresso
xsspresso
Tags/ DNS

DNS

2 writeups tagged with DNS

WebEasyLinux

HTB — Friendzone

DNS zone transfer reveals subdomains. SMB anonymous share leaks creds. LFI + PHP injection for RCE, Python lib hijack for root.

#SMB#LFI#DNS
Apr 23, 2022HackTheBox
WebMediumLinux

HTB — Cronos

DNS zone transfer reveals hidden vhosts. SQL injection login bypass, OS command injection for shell, cron privesc.

#DNS#SQLi#Command Injection
Mar 27, 2022HackTheBox