HackTheBox - Blazorized
Source: YouTube · IppSec · published Nov 9, 2024 · 1:13:59
The video demonstrates exploiting a "Blazorized" Hack The Box machine by decompiling the client-side WebAssembly code to extract JWT secrets and forge tokens for unauthorized access.
Key Takeaways:
• The challenge involves a website coded in Blazor (.NET WebAssembly), where processing occurs in the browser rather than the server, leading to vulnerabilities like sensitive logic exposure 0:00.
• The primary goal is to decompile the .NET DLL to discover the JWT logic and the secret key, which is inadvertently sent to the client, allowing attackers to create their own valid JWTs 0:27.
• A second website in the challenge also uses Blazor but does not lazily load DLLs, preventing full decompilation and requiring a different exploitation approach 0:39.
This walkthrough highlights the security risks of client-side .NET execution and the importance of keeping secrets server-side.
Sources:
Generate CPE Credits
Generate a professional CPE document from this video's transcript.
Estimated credit: 1 CPE hours
Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.
Topic: Penetration Testing. Commonly maps to: Security Assessment and Testing, Security Operations. Exact CISSP domains are assigned during generation.
Free account. One generation at a time, with a daily limit.
CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.
Transcript Preview
First 800 characters of the transcript
what's going on YouTube this is IP we doing blazer rized from hack the box which the F hold involves exploiting a website coded in Blazer which is a weird. net web assembly thing if you're new to web assembly it's hard to wrap your head around this because typically browsers use HTML and JavaScript to display websites but web assembly uses binary programs and because so much um processing is being done on the browser not the server a common vulnerability is sensitive information ends up being sent to the browser and in this box we're going to decompile a net D with else by and discover the JWT logic including secret is sent to the client so that will enable us to create our own jwt's there is a second website that's also coded in Blazer but this one doesn't lazily load dlls so you can't ju…