HackTheBox - Seventeen

Name: HackTheBox - Seventeen
Uploaded: 2022-09-24T15:14:07Z
Channel: IppSec
Description: 00:00 - Intro 00:57 - Start of nmap 02:50 - Taking a look at the website 05:20 - Showing some differences between Ffuf and Wfuzz 08:30 - Finding a known...

IppSec · Beginner ·📊 Data Analytics & Business Intelligence ·3y ago

00:00 - Intro 00:57 - Start of nmap 02:50 - Taking a look at the website 05:20 - Showing some differences between Ffuf and Wfuzz 08:30 - Finding a known exploit against the Exam Reviewer Management System 11:30 - Explaining the boolean injection then running SQLMap 15:40 - Using SQLMap to extract databases, tables, and some data 18:50 - Discovering the OldManagement site, dumping its database then logging in 26:30 - Exploiting the file upload vulnerability in OldManagement by replacing .htaccess 28:20 - Explaining various ways a developer may handle the file save 40:00 - Low privilege shell re…

Watch on YouTube ↗ (saves to browser)

Chapters (16)

Intro

0:57 Start of nmap

2:50 Taking a look at the website

5:20 Showing some differences between Ffuf and Wfuzz

8:30 Finding a known exploit against the Exam Reviewer Management System

11:30 Explaining the boolean injection then running SQLMap

15:40 Using SQLMap to extract databases, tables, and some data

18:50 Discovering the OldManagement site, dumping its database then logging in

26:30 Exploiting the file upload vulnerability in OldManagement by replacing .htacce

28:20 Explaining various ways a developer may handle the file save

40:00 Low privilege shell returned, in a docker find credentials in configuration fi

47:20 Examining port 4873 which is Verdaccio, an NPM Registry. Downloading packages

51:20 Going over the app startup script which we can run with Sudo. Ubuntu 18 sudo p

55:10 Using docker on our system to pull and run verdaccio

57:20 Creating a malicious npm package, then getting a shell on the box

1:04:40 Exploiting RoundCube 1.4.2 with CVE-2020-12640

Playlist

Uploads from IppSec · IppSec · 0 of 60

← Previous Next →

HackTheBox - Seventeen

Chapters (16)

Playlist

Lesson complete!