HackTheBox - Encoding

00:00 - Introduction 00:57 - Start of nmap 02:45 - Checking out the API Documentation 04:00 - Interacting with the API Server 05:15 - Showing the file_url, parameter and showing we can access local files 06:36 - Building a webserver in Flask to make some middleware to exploit this SSRF, allowing us to easily download files from the webserver 09:50 - Our middleware works! Can download files off the server. 11:15 - Downloading the apache2 configuration to find where all the webserver files are hosted 14:30 - Using gobuster against our middleware to discover any hidden webfiles, have to edit our middleware to return 404 if it didn’t return a file 16:45 - Running gobuster against our code now that it gives 404... Its going slow, switching to a different wordlist and finding a .git repository 17:50 - Git-Dumper fails because our middleware isn’t setting content-type correctly. Have to fix that 19:50 - Opening the source code from the .git repo up in Visual Studio code