HackTheBox Cyber Apocalypse 2024: Web Challenge Walkthroughs

Video walkthrough for the first 7 web challenges from @HackTheBox Cyber Apocalypse CTF 2024 (Hacker Royal); Flag Command, TimeKORP, KORP Terminal, Labyrinth Linguist, Locktalk, SerialFlow and Testimonial. The challenges involved API testing, command injection, SQL injection (SQLi), server-side template injection (SSTI), 403 bypass (haproxy), JWT attacks, Memcached injection, python pickle deserialization, gRPC hacking and path traversal! Write-ups/tutorials aimed at beginners - Hope you enjoy 🙂 #HackTheBox #HTB #CyberApocalypse #CyberApocalypse24 #CTF #CaptureTheFlag #Pentesting #OffSec #WebSec #AppSec

Write-ups: https://crypto-cat.gitbook.io/ctf-writeups/2024/htb-cyber-apocalypse/web

Looking for more …

403 bypass api api testing apocalypse attacks bypass challenge challenges command command injection ctf cyber deserialization flag grpc hacker hacking hackthebox haproxy injection jwt memcached python royal server sql sqli sql injection ssti template template injection terminal testing video walkthrough web