Premise
In this video walkthrough, we demonstrated common vulnerabilities in Lua programming including code injection, and performed a practical scenario using HackTheBox Luanne Machine.
What is Lua programming?
Lua is a powerful, efficient, lightweight, embeddable scripting language. It supports procedural programming, object-oriented programming, functional programming, data-driven programming, and data description.
Lua combines simple procedural syntax with powerful data description constructs based on associative arrays and extensible semantics. Lua is dynamically typed, runs by interpreting bytecode with a register-based virtual machine, and has automatic memory management with incremental garbage collection, making it ideal for configuration, scripting, and rapid prototyping.
Source: https://www.lua.org/about.html
Walkthrough
