SKF write-ups
Search…
Introduction
Cross Site Scripting (XSS)
Cross Site Scripting - Attribute (XSS-Attribute)
Cross Site Scripting - href (XSS-href)
Cross Site Scripting - DOM (XSS-DOM)
Cross Site Scripting - DOM-2 (XSS-DOM-2)
CSRF
CSRF - Samesite
CSRF - Weak
XML External Entity (XXE)
File upload
Clickjacking
Ratelimiting (Brute-force login)
HttpOnly Session Hijacking XSS
Exposed docker daemon
SQLI (Union)
SQLI (Like)
SQLI (Blind)
URL Redirection
URL Redirection - Harder
URL Redirection - Harder-2
Formula Injection
Client Side Template Injection (CSTI)
CORS exploitation
Parameter Binding
Local File Inclusion 1 (LFI-1)
Local File Inclusion 2 (LFI-2)
Local File Inclusion 3 (LFI-3)
Remote File Inclusion (RFI)
Content-Security-Policy (CSP)
Session Puzzling
Command Injection (CMD)
Command Injection 2 (CMD-2)
Command Injection 3 (CMD-3)
Command Injection 4 (CMD-4)
Command Injection Blind (CMD-Blind)
Server Side Request Forgery (SSRF)
Server Side Template Injection (SSTI)
Insecure Direct Object References (IDOR)
Deserialisation Yaml (DES-Yaml)
Deserialisation Pickle (DES-Pickle)
Deserialisation Pickle 2 (DES-Pickle-2)
GraphQL DOS
GraphQL IDOR
GraphQL Injections
GraphQL Introspection
GraphQL Mutations
JWT Null
JWT Secret
Race Condition
Race Condition File-Write
DoS Regex
Information Leakeage in Comments
Python - Information Leakeage in Comments
NodeJS - Information Leakeage in Comments
Java - Information Leakeage in Comments
Information Leakeage in Metadata
Auth Bypass
Auth Bypass - 1
Auth Bypass - 2
Auth-bypass - 3
Auth-bypass - Simple
Untrusted Sources (XSSI)
TLS Downgrade
Client Side Restriction Bypass
Client Side Restriction Bypass - Harder
Credentials Guessing
Credentials Guessing - 2
CSS Injection (CSSI)
Prototype Pollution
Right To Left Override (RTLO)
Ldap Injection
Ldap Injection - harder
template item
Powered By GitBook
Java - Information Leakeage in Comments

Running the app Java

First make sure java is installed on your host machine. After installation, we go to the folder of the lab we want to practice. "i.e /skf-labs/XSS, /skf-labs/RFI/" and run the following command:
1
$ ./mvnw spring-boot:run
Copied!
Now that the app is running let's go hacking!

Reconnaissance

It is very common, and even recommended, for programmers to include detailed comments and metadata on their source code. However, comments and metadata included into the HTML code might reveal internal information that should not be available to potential attackers. Comments and metadata review should be done in order to determine if any information is being leaked.
When we start the application we can see that there is a login form.

Exploitation

What we are going to do is explore and check the source code of the website in order to find some useful information that the programmer may have forgotten in the source code.
We found something promising! Now, we try these words as the credentials in the login form:
And goal achieved!

Additional sources

OWASP Web Security Testing Guide | OWASP Foundation
Previous
NodeJS - Information Leakeage in Comments
Next
Information Leakeage in Metadata
Last modified 2mo ago
Export as PDF
Copy link
Edit on GitHub
Contents
Running the app Java
Reconnaissance
Exploitation
Additional sources