HackTheBox - Unattended

01:00 - Begin of recon 03:30 - Running GoBuster to discover /dev and 06:50 - Checking out the web application 07:55 - Discovering SQL Injection in ID and playing with it 11:45 - Running SQLMap to dump pieces of the database 14:55 - Nginx Misconfiguration, missing trailing slash 19:10 - Downloading source code of the application 21:20 - Exploring the source of the application 25:47 - Specifying an error string in SQLMap to have it do boolean logic versus time-based 27:00 - Installing a Docker LAMP Server to run the web application 45:40 - Finally got the application running locally (Missed a comma which created a lot more work) 46:15 - Analyzing the SQL Injection with Debug turned on to see how it works 50:00 - Explanation of gaining code execution through an LFI PHP Cookies 53:00 - Exploring the cookie 55:40 - Have code execution on our docker, lets exploit the server 01:00:00 - Reverse Shell returned 01:02:35 - Exploring MySQL database and escalatin