One port can be a costly mistake | Attack The Rsync Service in a Private Program

Hello friends,

This is my first write-up, and I will talk about how I gained access to the entire file system in a Private Program at HackerOne. So, grab your cup of tea and join me as we delve into this story.

Table of Contents:

• WhoAmI
• Before the story and CIDRs
• Fingerprinting Phase and Port Scan
• Enum and Attack Rsync Service
• Some Advanced Tips and Conclusion

WhoAmI:

I am Mohanad Hesham, also known as @sword0x00, a Master’s student in Cybersecurity …

access attack bug bounty can costly mistake file file system fingerprinting friends grab hackerone hacking hello mistake port port scan private program rsync service story system write-up