CVE-2021-42949

CVE-2021-42949 The component controlla_login function in HotelDruid Hotel Management Software v303 generates a predictable session token, allowing attackers to bypass authentication via bruteforce attacks The session id is dynamically created at each login using the following generalized syntax: {date}{time}{100000-999999}{incremented login attempts} These values can be gu

TryHackMe HotelKiosk Official Writeup I created the HotelKiosk box on TryHackMe to highlight my first two CVEs (CVE-2021-42949 and CVE-2021-42948) found from inspiration through TheMayor's blog post I Was Bored One NIght and Found Two CVEs I also drew inspiration from John Hammond's Kiosk Breakout YouTube series where he covers the setup and escape of Windows native