WHOAMI
- Robemar Aviles
Tryhackme
- View
Hack the box
- View
Academy HTB
- View
Over The Wire
- View
  - Bandit
    Level 0
    Level 1
    Level 2
    Level 3
    Level 4
    Level 5
    Level 6
    Level 7
    Level 8
    Level 9
    Level 10
    Level 11
    Level 12
Under The Wire
- View
PicoCTF
- View
Portswigger
- View
Hacker101
- View
  - Micro-CMS v1
  - Trivial
Python
- View
  - Files
    Number 1 to 100
  - Hackerrank
    Power - Mod Power
    Mod Divmod
    String Split and Join
    What's Your Name?
    Find the Runner-Up Score!
    Print Function
    Loops
    Division
    Arithmetic
    Python If-Else
    Hello World
SQL
- View
  - Hackerrank
    Higher Than 75 Marks
    Weather Observation Station 1
    Weather Observation Station 3
    Weather Observation Station 4
    Select By ID
    Select All
    Revising the Select Query II
    Revising the Select Query I
    Japanese Cities' Attributes
    Japanese Cities' Name
Notes
- View
Commands
- View
Google Chrome Password
- Decrypt Google Chrome Password
- LaZagne
Comptia Security+ 701
CCNA
Malware Analysis Lab
TCM

Powered by GitBook

On this page

TCM

Practical Bug Bounty

LABS

SSRF 0x01

PreviousCSRF 0x02 NextOpen Redirect 0x01

Last updated 7 months ago

First try the application

Looks like the request is communicating with api

We can see that we have admin.php in that api directory but 403 request means we cant access

But when we manipulate the request now we can actually access the admin.php

through the application that is communication with api

now we can find for some localhost file or something