Persecure : my learning archive

LetsDefend : Investigate Web Attack

https://app.letsdefend.io/challenge/investigate-web-attack/

Designed to brute force directories and files names on web/application servers.

Code Injection is the general term for attack types which consist of injecting code that is then interpreted/executed by the application.

In order to have any persistency this payload creates a user called hacker and password as Asd123!!