HackTheBox - Crafty

Name: HackTheBox - Crafty
Uploaded: 2024-06-15T15:00:58Z
Channel: IppSec
Description: 00:00 - Introduction 01:00 - Start of nmap 02:55 - Doing a full nmap scan, then scanning the minecraft ports with scripts to discover minecraft version ...

IppSec · Beginner ·🔐 Cybersecurity ·1y ago

00:00 - Introduction 01:00 - Start of nmap 02:55 - Doing a full nmap scan, then scanning the minecraft ports with scripts to discover minecraft version 04:45 - Discovering this minecraft version is vulnerable to Log4j 06:50 - Extracting Java Version/Class Path/etc via Log4j 10:40 - Using the Log4j Shell POC to get a shell, this reflectively loads a Java Library 13:50 - Getting a reverse shell 15:00 - Discovering plugins on the server, copying the JAR over to our box and decompiling it to discover hardcoded credentials 20:20 - Using PowerShell to run a command as Administrator to get root

Watch on YouTube ↗ (saves to browser)

Chapters (9)

Introduction

1:00 Start of nmap

2:55 Doing a full nmap scan, then scanning the minecraft ports with scripts to disc

4:45 Discovering this minecraft version is vulnerable to Log4j

6:50 Extracting Java Version/Class Path/etc via Log4j

10:40 Using the Log4j Shell POC to get a shell, this reflectively loads a Java Libra

13:50 Getting a reverse shell

15:00 Discovering plugins on the server, copying the JAR over to our box and decompi

20:20 Using PowerShell to run a command as Administrator to get root

Playlist

Uploads from IppSec · IppSec · 0 of 60

← Previous Next →