HackThebox - Explore

Name: HackThebox - Explore
Uploaded: 2021-10-30T15:05:02Z
Channel: IppSec
Description: 00:00 - Intro 00:45 - Start of nmap 01:50 - Weird SSH Banner saying its Banana Studio, google tells us this is Android 03:00 - Doing a script scan again...

IppSec · Beginner ·📰 AI News & Updates ·4y ago

00:00 - Intro 00:45 - Start of nmap 01:50 - Weird SSH Banner saying its Banana Studio, google tells us this is Android 03:00 - Doing a script scan against all open ports, and googling what each open port is 03:45 - Port 59777, brings us to ES File Explorer which has an exploit out 05:16 - Running the ES File Explorer exploit with getDeviceInfo to confirm it works 06:20 - Listing files, pictures, and eventually downloading a picture 08:00 - Opening the picture reveals some credentials, can ssh into the box with them 10:10 - Installing ADB, so we can do adb connect to port 5555 10:30 - Setting u…

Watch on YouTube ↗ (saves to browser)

Chapters (11)

Intro

0:45 Start of nmap

1:50 Weird SSH Banner saying its Banana Studio, google tells us this is Android

3:00 Doing a script scan against all open ports, and googling what each open port i

3:45 Port 59777, brings us to ES File Explorer which has an exploit out

5:16 Running the ES File Explorer exploit with getDeviceInfo to confirm it works

6:20 Listing files, pictures, and eventually downloading a picture

8:00 Opening the picture reveals some credentials, can ssh into the box with them

10:10 Installing ADB, so we can do adb connect to port 5555

10:30 Setting up an SSH Port forward so we can access port 5555

14:30 Extra Content: Playing with the exploit script to understand what it does

Playlist

Uploads from IppSec · IppSec · 0 of 60

← Previous Next →

HackThebox - Explore

Chapters (11)

Playlist

Lesson complete!