Appsec

CCTV is an easy-difficulty box on HacktheBox dealing with a misconfiguration paired with a SQL injection for a fictitious CCTV camera company, followed by a public CVE on an internally-hosted app.

WingData is an easy-difficulty box on HacktheBox dealing with two CVEs that have public proof-of-concept code written for them.

Solutions for Portswigger’s SQL Injection academy module.