HackTheBox - Devvortex

Name: HackTheBox - Devvortex
Uploaded: 2024-04-27T15:00:40Z
Channel: IppSec
Description: 00:00 - Intro 01:00 - Start of nmap 03:45 - Discovering dev.devvortex.htb is a Joomla Page, showing JoomScan and enumerating version manually through ma...

IppSec · Beginner ·🔐 Cybersecurity ·1y ago

00:00 - Intro 01:00 - Start of nmap 03:45 - Discovering dev.devvortex.htb is a Joomla Page, showing JoomScan and enumerating version manually through manifests 07:00 - Looking for Joomla Exploits for version 4.2.6, discovering a way to view application config as an unauthenticated user 09:40 - Start of deep dive into the exploit, looking at commits on the day the advisory said this was patched 10:50 - Showing the fix just shows it is a mass assignment vulnerability, looking at how this works 17:10 - Showing fuzzing for arguments with ffuf would have caught this 26:18 - Logging into Joomla, the…

Watch on YouTube ↗ (saves to browser)

Chapters (10)

Intro

1:00 Start of nmap

3:45 Discovering dev.devvortex.htb is a Joomla Page, showing JoomScan and enumerati

7:00 Looking for Joomla Exploits for version 4.2.6, discovering a way to view appli

9:40 Start of deep dive into the exploit, looking at commits on the day the advisor

10:50 Showing the fix just shows it is a mass assignment vulnerability, looking at h

17:10 Showing fuzzing for arguments with ffuf would have caught this

26:18 Logging into Joomla, then placing a shell in the Joomla Templates

32:15 Logging into the database, cracking a hash to gain access to another user

35:30 Taking a look at sudo discovering apport-cli, gtfobins comes up with nothing,

Playlist

Uploads from IppSec · IppSec · 0 of 60

← Previous Next →