📅 Appointment - Overview

📝 Machine Information

  • Name: Appointment
  • Platform: Hack The Box (Starting Point - Tier 1)
  • Difficulty: Very Easy
  • IP Address: 10.129.101.97

🎯 Objective

Bypass the login web application and capture the flag.

🚀 Walkthrough Summary

  1. Reconnaissance: Identified Port 80 (HTTP) as open using rustscan and nmap.
  2. Enumeration: Discovered a login page running on Apache/2.4.38 (Debian).
  3. Authentication Bypass: Performed a SQL Injection (SQLi) attack on the username field.
  4. Exfiltration: Successfully bypassed the login and retrieved the flag from the dashboard.


🖼️ Proof of Compromise


Next Step