Web Hacking Challenges EXPLAINED | with PinkDraconian
Source: YouTube · Hack The Box · published Jan 17, 2023 · 29:54
This video demonstrates solving the Steam Coin Challenge by exploiting multiple security vulnerabilities in a cryptocurrency application 0:00-0:05.
Key Takeaways:
• The challenge infrastructure uses a reverse proxy, Node.js application, and CouchDB database 1:02-1:16.
• First exploit involves JWT token manipulation by uploading a malicious JWKS file with a PDF extension to bypass filetype restrictions 9:20-11:13.
• Second exploit leverages HTTP request smuggling vulnerability in HAProxy 2.4.0 to access restricted admin endpoints 19:55-24:14.
• Final attack uses XSS in an SVG file to extract the admin verification document (flag) from the database via server-side request forgery 24:40-28:27.
The multi-stage exploit successfully obtains the flag "hack the box I downloaded some couch" by chaining these vulnerabilities together 29:13-29:27.
Sources:
- 0:00-0:05 Introduction to the Steam Coin Challenge
- 1:02-1:16 Infrastructure explanation
- 9:20-11:13 File upload bypass and JWKS spoofing
- 19:55-24:14 HAProxy HTTP request smuggling
- 24:40-28:27 SVG XSS and database exploitation
- 29:13-29:27 Flag retrieval and challenge completion
Generate CPE Credits
Generate a professional CPE document from this video's transcript.
Estimated credit: 0.5 CPE hours
Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.
Topic: Cybersecurity. Commonly maps to: Security and Risk Management, Security Operations. Exact CISSP domains are assigned during generation.
Free account. One generation at a time, with a daily limit.
CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.
Transcript Preview
First 800 characters of the transcript
steam coin challenge in this challenge we are dealing with a cryptocurrency provider set in a steampunk kind of vibe we can do things such as create an account log into our accounts and then manage our steam coin wallets we also notice a settings page and this page allows us to upload identification documents as you can see this kind of mimics a very common type of new crypto exchanges popping up left right and center but luckily this challenge has limited functionality which means that we don't get stuck in as many rabbit holes furthermore we even get the source code of this Challenge and that is a game changer because we don't need to spray and pray the website with payloads we can actually look at what the target is doing craft payloads locally and then execute them on the remote knowin…