Offensive

[TARGET]

HackTheBox

[DIFFICULTY]

Easy

[CLASS]

CTF & Labs

SSRF to RCE on Sau, and why the forgery worked

How an unauthenticated request-basket service reaches an internal Maltrail instance, and why the loopback restriction never applied to it at all.