HackTheBox - MagicGardens
Source: YouTube · IppSec · published Feb 8, 2025 · 1:43:27
This video demonstrates the exploitation of the "Magic Gardens" Hack The Box machine, focusing on a unique foothold via payment processor manipulation and QR code injection to steal administrative cookies 0:00.
Key Takeaways:
• The initial attack vector involves an online shop that uses an external payment processor, allowing attackers to redirect requests to their own server to enumerate response fields 0:08.
• By creating a simple web server to mimic the payment processor's responses, the attacker can successfully enumerate the system and obtain free items 0:25.
• The foothold is achieved by manipulating a generated QR code to inject JavaScript, which steals the administrator's session cookie upon scanning 0:35.
The machine highlights the risks of custom payment integrations and client-side code injection via generated media.
Sources:
Generate CPE Credits
Generate a professional CPE document from this video's transcript.
Estimated credit: 1.5 CPE hours
Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.
Topic: Penetration Testing. Commonly maps to: Security Assessment and Testing, Security Operations. Exact CISSP domains are assigned during generation.
Free account. One generation at a time, with a daily limit.
CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.
Transcript Preview
First 800 characters of the transcript
what's going on YouTube this is IPC and we'll be doing Magic Gardens from hack the box which is a pretty difficult machine primarily because the foothold is extremely unique it starts off with an online shop that has a payment processor that it sends off your um request to but you can edit the actual processor so you can direct it to yourself however you can't get free things from the shop because you don't know um how the payment processor responds to these request but you can enumerate the payment processor to figure out what Fields it sends back then make a simple web server and this will allow you to get free things from the website eventually you get a QR code which you can manipulate to put some uh JavaScript code in there in order to steal an administrator's cookie and then that lea…