Since doing the Advent of Cyber 2 event on TryHackme in December 2020, my interest in cybersecurity was well and truly sparked.
The more difficult boxes I try to complete on TryHackMe or HackTheBox usually involve some form of port-forwarding or even pivoting onto a different machine. I always seem to forget the commands to
I decided to start trying some of the boxes on HackTheBox for a change, instead of TryHackMe. In the past I've found these to be a bit more difficult generally than THM, so I opted to start with an easy one.
I recently completed the TryHackMe room Inferno. This was a medium rated room and I think that was a pretty accurate rating. I started this capture the flag room the same as any
I decided to try another TryHackMe capture the flag room. This time it was Mustacchio. This room involved one of the OWASP Top 10 vulnerabilities called A4:2017-XML External Entities (XXE). This vulnerability,