SmartHire — Hack The Box

SmartHire — Hack The Box

Hack The Box · SmartHire

Recon turns up a careers portal and a staging API behind the same cert. The notes walk through abusing the application tier, pivoting on reused service credentials, and eventually landing root through a deployment hook that runs with too much trust.