HackTheBox - Blocky

Name: HackTheBox - Blocky
Uploaded: 2017-12-09T15:02:29Z
Channel: IppSec
Description: The STTY command I messed up was simply `stty rows ## cols ##` 01:15 - Begin Recon with Reconnoitre 03:15 - Examining findings from Reconnoitre 06:50 - ...

IppSec · Intermediate ·🛡️ AI Safety & Ethics ·8y ago

The STTY command I messed up was simply `stty rows ## cols ##` 01:15 - Begin Recon with Reconnoitre 03:15 - Examining findings from Reconnoitre 06:50 - Decompiling java Jar Files with JAD 08:18 - Using JD-GUI 10:33 - Running WPScan 12:10 - Manually enumerating wordpress users 12:43 - SSH To the box and PrivEsc ------ Box Completed, Below extra content (Some mistakes, pretty much do this live without prep) 15:30 - Rabbit hole, gaining access through FTP 17:09 - Finding Wordpress DB Password 18:33 - Switching to WWW-DATA by using phpMyAdmin + Wordpress 20:10 - Generating a PHP Password for Word…

Watch on YouTube ↗ (saves to browser)

Chapters (15)

1:15 Begin Recon with Reconnoitre

3:15 Examining findings from Reconnoitre

6:50 Decompiling java Jar Files with JAD

8:18 Using JD-GUI

10:33 Running WPScan

12:10 Manually enumerating wordpress users

12:43 SSH To the box and PrivEsc

15:30 Rabbit hole, gaining access through FTP

17:09 Finding Wordpress DB Password

18:33 Switching to WWW-DATA by using phpMyAdmin + Wordpress

20:10 Generating a PHP Password for Wordpress

21:50 Gaining code execution with Wordpress Admin access

25:40 Shell as www-data

26:40 Enumerating Kernel Exploits with Linux-Exploit-Suggester

30:10 Attempting CVE-2017-6074 Dccp Kernel Exploit (Unstable AF)

Playlist

Uploads from IppSec · IppSec · 32 of 60

← Previous Next →