📅 Appointment - Overview
📝 Machine Information
- Name: Appointment
- Platform: Hack The Box (Starting Point - Tier 1)
- Difficulty: Very Easy
- IP Address: 10.129.101.97
🎯 Objective
Bypass the login web application and capture the flag.
🚀 Walkthrough Summary
- Reconnaissance: Identified Port 80 (HTTP) as open using
rustscanandnmap. - Enumeration: Discovered a login page running on Apache/2.4.38 (Debian).
- Authentication Bypass: Performed a SQL Injection (SQLi) attack on the username field.
- Exfiltration: Successfully bypassed the login and retrieved the flag from the dashboard.
🔗 Quick Links
🖼️ Proof of Compromise

Next Step