Medium

Link: https://www.hackthebox.eu/home/machines/profile/267

Link: https://www.hackthebox.eu/home/machines/profile/262

We are going to pwn Cache from Hack The Box.

Initial is by doing a SQLI to bypass login. And File Upload Vulnerability, from there we can get a shell and find user creds in SQL database. And root is by path hijack attack.

Cascade is a Windows Medium box, which involves lot of enumeration and finding VNC credentials which can be decrypted and with that we need to find SQlite database and also a small Reverse …