FORGE Walkthrough

What flag was used to help fuzz for a sub-domain?

• -h

• -H

• -host

• -u

What was the vulnerability that gave us our user foothold?

• SSTI

• SQL Injection

• XSS

• SSRF

What did we exploit in the python code to generate a bash with root permissions?

• pdb

• Outdated Dependencies

• Injection

• Directory Traversal

What is the name of the repository where 8aby8ell got his wordlist from for sub-domain fuzzing

• dbuster

• The wordlist pre-installed with Kali

• SecLists

• DLib

What protocol where the credentials we found associated with

• HTTP

• FTP

• HTTPS

• FTPS