VulnNet: Node

VulnNet: Node - tryhackme retired machine walkthrough.

Approach

Nmap scan revealed Node.js application

Enumerated API endpoints

Found NoSQL injection

Extracted user credentials

Gained shell and escalated

Loading writeup from GitHub...