What is Container ? Containers are a form of operating system virtualization. A single container might be used to run anything from a small microservice or software process to a larger application. Inside a container are all the necessary executables, binary code, libraries, and configuration files. Why do we need…

Starting with the nmap scan, two ports are found to open.

Starting initial scan with autorecon we found two ports open- 22 and 8080

INITIAL FOOTHOLD Starting with the intial scan of the box we found no other service was runnning except smb on port 445. nmap -sV -sC 10.10.10.178 -O scan_result.txt

FLASK The very first thing that should caught our attention is that it is a flask application , therfore one should check for SSTI(server side template injection). Now the job is to identify which SSTI engine .Using the payload {{7*7}} the output 7777777 in response box indicates that it is…

JSON Web Token (JWT) is an open standard (RFC 7519) that defines a compact and self-contained way for securely transmitting information between parties as a JSON object. This information can be verified and trusted because it is digitally signed. …

Malicious File Upload Large amount of bug found these days encompass xss , sql , idor etc. However even the bug requiring low complexity but high severity can score you a good bounty.All you need is creativity. There is website let’s say redacted.com (for bug disclosure reason’s) that provides users…