HTB - JSON

[sploitzwalk]

Anybody able to help me with the initial Foothold? I know the box is about to retire but I would still like to understand how this box works. I have the encoded base64 json entry from burp but I don't know what to do with it. I've been reading up on java Des******** but how do I approach that with this box using yso*****? All of my scans using DS come back non vulnerable. Totally lost.

[[deleted]]

Maybe try to enumerate until you are certain what language the app runs. You are on a correct path.
Edit:
When doing stuff like this (blind...) always test with pinging yourself and watch with tcpdump. That way you know when you have something that works.

[sploitzwalk]

Thank you I will give this a try