https://www.noobsec.net/tags/boolean-sql-injection/ Recent content in Boolean Sql Injection on Welcome to noobsec Hugo -- gohugo.io en-us Sat, 18 Jul 2020 14:46:16 +0000 https://www.noobsec.net/hackthebox/htb-falafel-writeup-w-o-metasploit/ Sat, 18 Jul 2020 14:46:16 +0000 https://www.noobsec.net/hackthebox/htb-falafel-writeup-w-o-metasploit/ <!-- end-chunk --> <!-- begin-chunk data-anchor="hackthebox---falafel-writeup-wo-metasploit" --> <h1 class="header-anchor-wrapper">HackTheBox - Falafel Writeup w/o Metasploit <a href="#hackthebox---falafel-writeup-wo-metasploit" class="header-anchor-link"> <svg xmlns="http://www.w3.org/2000/svg" width="1rem" height="1rem" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"> <line x1="4" y1="9" x2="20" y2="9"></line><line x1="4" y1="15" x2="20" y2="15"></line><line x1="10" y1="3" x2="8" y2="21"></line><line x1="16" y1="3" x2="14" y2="21"></line> </svg> </a> </h1> <!-- end-chunk --> <!-- begin-chunk data-anchor="introduction" --> <h2 class="header-anchor-wrapper">Introduction <a href="#introduction" class="header-anchor-link"> <svg xmlns="http://www.w3.org/2000/svg" width="1rem" height="1rem" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"> <line x1="4" y1="9" x2="20" y2="9"></line><line x1="4" y1="15" x2="20" y2="15"></line><line x1="10" y1="3" x2="8" y2="21"></line><line x1="16" y1="3" x2="14" y2="21"></line> </svg> </a> </h2> <p>Falafel is a retired HackTheBox machine and one of the most interesting machines I have hacked on the platform. It is a Linux machine with some really fun vulnerabilities to exploit. The machine is rated hard but the author was kind enough to give us hints as we hack through it. The machine requires you to know a range of nuances from SQLi to Linux filesystems. Let&rsquo;s jump right in.</p>