HackTheBox - Shoppy

00:00 - Intro
01:00 - Start of nmap
01:55 - Taking a look at the web page
02:30 - Discovering it is NodeJS based upon the error message [MasterRecon]
03:40 - Performing NoSQL boolean injection (mongodb) to bypass authentication
06:45 - Working payload for the NoSQL Injection.
09:30 - Dumping the user database with more NoSQL Injection and using CrackStation to get the password
12:00 - Using ffuf to find the mattermost.shoppy.htb subdomain
14:20 - Logging into MatterMost and getting …

authentication bypass database dumping error find hackthebox htb injection logging mattermost message mongodb nmap nosql password payload performing start subdomain the web web working