Search
WebVerse Pro: BedRock Writeup | thepentesting.ninja

🔒 Protected Content

This post is password protected. Please enter the password to view the content.

Incorrect password. Please try again.

Connect With Me

WebVerse Pro: BedRock Writeup

WebVerse Pro: BedRock Writeup

thepentesting.ninja's Picture
thepentesting.ninja in bedrock webverse writeup linux web ssrf nosql-injection cve-2023-38646 idor

You may also like

HackSmarter: Samurai Writeup
7 min read

HackSmarter: Samurai Writeup

Samurai is a Linux machine featuring a Joomla 4.2.5 instance vulnerable to CVE-2023-23752, leaking database credentials and sensitive information granting admin access, leading to RCE and a command injection privesc via a SUID-like custom binary.

thepentesting.ninja's Picture
thepentesting.ninja in samurai hacksmarter linux joomla cve-2023-23752 command-injection sudo rce
HTB: Craft Writeup
13 min read

HTB: Craft Writeup

Craft is a medium Linux machine featuring a Python eval injection in a craft beer REST API, credential leakage via a self-hosted Gogs instance, and privilege escalation through HashiCorp Vault OTP SSH.

thepentesting.ninja's Picture
thepentesting.ninja in craft hackthebox linux medium eval-injection gogs hashicorp docker
HTB: Conversor Writeup
9 min read

HTB: Conversor Writeup

Conversor is a medium Linux machine featuring XSLT injection via an EXSLT file-write primitive, credential harvesting from a SQLite database, and privilege escalation through a misconfigured needrestart sudo rule.

thepentesting.ninja's Picture
thepentesting.ninja in conversor hackthebox linux xslt-injection exslt sqlite needrestart sudo-abuse

Latest Posts

HackSmarter: Martini Writeup
12 min read

HackSmarter: Martini Writeup

thepentesting.ninja's Picture
thepentesting.ninja
HackSmarter: ShadowGate Writeup
14 min read

HackSmarter: ShadowGate Writeup

thepentesting.ninja's Picture
thepentesting.ninja

Explore Tags

acl-abuse active-directory adcs administrator ai ansible-vault api apisec asreproasting atlantis authentication-bypass authority badsuccessor bash-injection bloodhound browsed bscp burpsuite bytecode-poisoning capenx cbbh certifications charcol citycouncil codeparttwo command-injection constrained-delegation conversor craft crushftp cspt ctf cve cve-2019-12840 cve-2023-23752 cve-2024-30088 cve-2024-4577 cve-2024-5932 cve-2025-31161 cve-2026-29000 cwes darkzero dcsync dns docker dom-poisoning dpapi easy eighteen erlang esc1 esc4 esc8 escapetwo eval-injection