Boro Senpai 2
Part 2 of the Boro Senpai series: SSRF via Docker internal hostname.
Docker
No writeups match your filter.
Neural Sync Portal
SSRF via Docker internal hostname to reach the metadata service and retrieve the flag.
Robots — TryHackMe
XSS in a registration form exfiltrates the admin’s session cookie; RFI via the admin URL-tester gives www-data code execution; double-MD5 cracking yields SSH access, and a sudo apache2 logging trick writes a root SSH key.