Jan. 7, 2023, 3 p.m. | IppSec

IppSec www.youtube.com

00:00 - Intro
01:00 - Start of nmap
02:50 - Taking a look at the website
03:30 - Testing the webhook to see the app will send us information about a web page
04:20 - Trying to access port 3000, getting blocked by a filter trying to include 127.0.0.1 and 0x7f000001
06:20 - Playing with the webhook to see if it will send us the entire page
07:10 - Having our webserver redirect to localhost, to see if this bypasses …

access app blocked filter hackthebox health information localhost nmap port send start testing web webhook webserver website

SOC 2 Manager, Audit and Certification

@ Deloitte | US and CA Multiple Locations

Information Security Engineers

@ D. E. Shaw Research | New York City

Staff DFIR Investigator

@ SentinelOne | United States - Remote

Senior Consultant.e (H/F) - Product & Industrial Cybersecurity

@ Wavestone | Puteaux, France

Information Security Analyst

@ StarCompliance | York, United Kingdom, Hybrid

Senior Cyber Security Analyst (IAM)

@ New York Power Authority | White Plains, US