VulnHub - Sokar

IppSec · Beginner ·🔐 Cybersecurity ·8y ago

Skills: Ethical Hacking & Pen Testing90%

Key Takeaways

Exploits Sokar using NetDiscover, Masscan, Nmap, and Shellshock

Original Description

01:08 - Start of Recon (NetDiscover/Masscan/Nmap) 05:37 - Finding the CGI Script and using Shellshock 10:00 - Start creating ShellShock python script 16:08 - Converting script "Forward Shell" for FW Evasion with mkfifo 40:00 - Adding Threading (Background Task) to improve script 45:00 - Script completed - Attempt to enumerate FW Rules 49:00 - Fumbling around with IPv6 (Check out Sneaky Video for more) 53:25 - Reverse shell via IPv6 and ncat 01:05:00 - Reading Bynarr's mail to get password and PrivEsc via LIME/Memory Dum p 1:07:20 - Unintended PrivEsc via ShellShock + Environment Variables 1:18:20 - Begin of MITM (Man in the Middle) First with Ettercap 1:24:19 - Installing Bettercap2 + Usage 1:33:40 - Spoofing ARP and DNS with BetterCap 1:41:11 - Privesc to root via Git on case-insensitive FS 1:53:30 - Woot root, lets take a look at the IPTable FW 1:56:00 - Explaining the exploit a bit better

Watch on YouTube ↗ (saves to browser)

Sign in to unlock AI tutor explanation · ⚡30

Playlist

Uploads from IppSec · IppSec · 33 of 60

← Previous Next →

HHC2016 - Analytics

HHC2016 - Analytics

HackTheBox - October

HackTheBox - October

HackTheBox - Arctic

HackTheBox - Arctic

HackTheBox - Brainfuck

HackTheBox - Brainfuck

HackTheBox - Bank

HackTheBox - Bank

HackTheBox - Joker

HackTheBox - Joker

HackTheBox - Lazy

HackTheBox - Lazy

Camp CTF 2015 - Bitterman

Camp CTF 2015 - Bitterman

HackTheBox - Devel

HackTheBox - Devel

Reversing Malicious Office Document (Macro) Emotet(?)

Reversing Malicious Office Document (Macro) Emotet(?)

HackTheBox - Granny and Grandpa

HackTheBox - Granny and Grandpa

HackTheBox - Pivoting Update: Granny and Grandpa

HackTheBox - Pivoting Update: Granny and Grandpa

HackTheBox - Optimum

HackTheBox - Optimum

HackTheBox - Charon

HackTheBox - Charon

HackTheBox - Sneaky

HackTheBox - Sneaky

HackTheBox - Holiday

HackTheBox - Holiday

HackTheBox - Europa

HackTheBox - Europa

Introduction to tmux

Introduction to tmux

HackTheBox - Blocky

HackTheBox - Blocky

HackTheBox - Nineveh

HackTheBox - Nineveh

HackTheBox - Jail

HackTheBox - Jail

HackTheBox - Blue

HackTheBox - Blue

HackTheBox - Calamity

HackTheBox - Calamity

HackTheBox - Shrek

HackTheBox - Shrek

HackTheBox - Mirai

HackTheBox - Mirai

HackTheBox - Shocker

HackTheBox - Shocker

HackTheBox - Mantis

HackTheBox - Mantis

HackTheBox - Node

HackTheBox - Node

HackTheBox - Kotarak

HackTheBox - Kotarak

HackTheBox - Enterprise

HackTheBox - Enterprise

HackTheBox - Sense

HackTheBox - Sense

HackTheBox - Minion

HackTheBox - Minion

VulnHub - Sokar

VulnHub - Sokar

VulnHub - Pinkys Palace v2

VulnHub - Pinkys Palace v2

HackTheBox - Inception

HackTheBox - Inception

Vulnhub - Trollcave 1.2

Vulnhub - Trollcave 1.2

HackTheBox - Ariekei

HackTheBox - Ariekei

HackTheBox - Flux Capacitor

HackTheBox - Flux Capacitor

HackTheBox - Jeeves

HackTheBox - Jeeves

HackTheBox - Tally

HackTheBox - Tally

HackTheBox - CrimeStoppers

HackTheBox - CrimeStoppers

HackTheBox - Fulcrum

HackTheBox - Fulcrum

HackTheBox - Chatterbox

HackTheBox - Chatterbox

HackTheBox - Falafel

HackTheBox - Falafel

How To Create Empire Modules

How To Create Empire Modules

HackTheBox - Nightmare

HackTheBox - Nightmare

HackTheBox - Nightmarev2 - Speed Run/Unintended Solutions

HackTheBox - Nightmarev2 - Speed Run/Unintended Solutions

HackTheBox - Bart

HackTheBox - Bart

HackTheBox - Aragog

HackTheBox - Aragog

HackTheBox - Valentine

HackTheBox - Valentine

HackTheBox - Silo

HackTheBox - Silo

HackTheBox - Rabbit

HackTheBox - Rabbit

HackTheBox - Celestial

HackTheBox - Celestial

HackTheBox - Stratosphere

HackTheBox - Stratosphere

HackTheBox - Poison

HackTheBox - Poison

HackTheBox - Canape

HackTheBox - Canape

HackTheBox - Olympus

HackTheBox - Olympus

HackTheBox - Sunday

HackTheBox - Sunday

HackTheBox - Fighter

HackTheBox - Fighter

HackTheBox - Bounty

HackTheBox - Bounty

More on: Ethical Hacking & Pen Testing

View skill →

HackTheBox - Photobomb

HackTheBox - Photobomb

Live Hacking - Twitch Recording overthewire.org - Vortex 0x01-0x03 (3h)

Live Hacking - Twitch Recording overthewire.org - Vortex 0x01-0x03 (3h)

HackTheBox - Multimaster

HackTheBox - Multimaster

Hacking a Smart Camera: IoT Hacking With Andrew Bellini (Part 3)

Hacking a Smart Camera: IoT Hacking With Andrew Bellini (Part 3)

The Cyber Mentor

Linux Hacking: Binary & Hex | Leviathan: OverTheWire (Levels 3-4)

Linux Hacking: Binary & Hex | Leviathan: OverTheWire (Levels 3-4)

Ethical Password Cracking

Ethical Password Cracking

Related Reads

We required MFA. One query parameter turned it off.

Learn how a simple query parameter can bypass MFA and understand why MFA is a session property, not just a login step

Dev.to · authagonal

Tego AI Finds Claude Tag Slack Integration Can Trigger Unauthorized Enterprise Actions

Tego AI discovers a vulnerability in the Claude Tag Slack integration that can trigger unauthorized enterprise actions, highlighting the importance of cybersecurity in AI-powered tools

The night I leaked my own payment key, and the circuit breaker that caught it

Learn how a SaaS developer caught a payment key leak using a circuit breaker and apply similar security measures to your own projects

Dev.to · Vinicius Pereira

Hackers Are Now Vibe-Coding Malware — And Your Antivirus Can’t See It

Learn how hackers use AI-generated malware to evade signature-based security and why traditional antivirus methods are ineffective against it

Medium · Cybersecurity

Chapters (16)

1:08 Start of Recon (NetDiscover/Masscan/Nmap)

5:37 Finding the CGI Script and using Shellshock

10:00 Start creating ShellShock python script

16:08 Converting script "Forward Shell" for FW Evasion with mkfifo

40:00 Adding Threading (Background Task) to improve script

45:00 Script completed - Attempt to enumerate FW Rules

49:00 Fumbling around with IPv6 (Check out Sneaky Video for more)

53:25 Reverse shell via IPv6 and ncat

1:05:00 Reading Bynarr's mail to get password and PrivEsc via LIME/Memory Dum

1:07:20 Unintended PrivEsc via ShellShock + Environment Variables

1:18:20 Begin of MITM (Man in the Middle) First with Ettercap

1:24:19 Installing Bettercap2 + Usage

1:33:40 Spoofing ARP and DNS with BetterCap

1:41:11 Privesc to root via Git on case-insensitive FS

1:53:30 Woot root, lets take a look at the IPTable FW

1:56:00 Explaining the exploit a bit better

Is your free email putting your bank account at risk? #Podcast #Interview #Efani #BankAccounts