Calamity [Need some guidance]

HTB Content Machines
,
1

So, It has been more than 6 hours and I am stuck on this machine. I found login area and hidden image file.

I don’t know much about image stagnography [i am noob only knows basics]. Checked hexdump, file and exif shows it is short of jfif standard jpeg.

Am I lost or I am on right path? [I have tried sqli and brute forcing on login area no luck]

2

I think you’re off the path. Or at least, the path I took is different. So you’re trying to log in. My first go-to when doing web attacks is mapping out as much of the domain as I can, and statically analyzing pages for vulnerabilities. It worked out for me here.