This Linux boxe involves SSTI, filtering bypass and password cracking, let's dig in ! Scan Nmap scan report for 10.10.11.253 Host is up (0.023s latency). Not shown: 65533 closed tcp…

On this Linux machine we are going to play with some CVE in Javascript, password cracking and exploit a flawed string comparison in a script. Initial Nmap scan First we…