HackTheBox - ExpressWay

IppSec · Beginner ·🔐 Cybersecurity ·3w ago
00:00 - Introduction 00:40 - Start of nmap 03:30 - UDP Nmap finished, running ike-scan in aggressive mode 05:00 - Cracking the ike hash with hashcat and then SSH into the box 06:10 - Showing TFTP was open which has a cisco config, showing MSF and NMAP to enumerate the TFTP Service 10:55 - Running LinPeas to show us the outdated sudo 12:00 - Exploiting CVE-2025-32463, the CHROOT Sudo Exploit 14:30 - Exploiting the other one, CVE-2025-32462, which requires finding a hostname on the box
Watch on YouTube ↗ (saves to browser)

Chapters (8)

Introduction
0:40 Start of nmap
3:30 UDP Nmap finished, running ike-scan in aggressive mode
5:00 Cracking the ike hash with hashcat and then SSH into the box
6:10 Showing TFTP was open which has a cisco config, showing MSF and NMAP to enumer
10:55 Running LinPeas to show us the outdated sudo
12:00 Exploiting CVE-2025-32463, the CHROOT Sudo Exploit
14:30 Exploiting the other one, CVE-2025-32462, which requires finding a hostname on

Playlist

Uploads from IppSec · IppSec · 0 of 60

← Previous Next →
1 HHC2016 - Dungeon
HHC2016 - Dungeon
IppSec
 2 HHC2016 - Terminal Speedrun
HHC2016 - Terminal Speedrun
IppSec
 3 HHC2016 - Ads
HHC2016 - Ads
IppSec
 4 HHC2016 - Debug
HHC2016 - Debug
IppSec
 5 HHC2016 - Exception
HHC2016 - Exception
IppSec
 6 HHC2016 - Analytics
HHC2016 - Analytics
IppSec
 7 HHC2016 - Getting Coins
HHC2016 - Getting Coins
IppSec
 8 HackTheBox - Popcorn
HackTheBox - Popcorn
IppSec
 9 HackTheBox - October
HackTheBox - October
IppSec
 10 HackTheBox - Arctic
HackTheBox - Arctic
IppSec
 11 HackTheBox - Tenten
HackTheBox - Tenten
IppSec
 12 HackTheBox - CronOS
HackTheBox - CronOS
IppSec
 13 HackTheBox - Brainfuck
HackTheBox - Brainfuck
IppSec
 14 HackTheBox - Beep
HackTheBox - Beep
IppSec
 15 HackTheBox - Bastard
HackTheBox - Bastard
IppSec
 16 HackTheBox - Bank
HackTheBox - Bank
IppSec
 17 HackTheBox - Joker
HackTheBox - Joker
IppSec
 18 HackTheBox - Haircut
HackTheBox - Haircut
IppSec
 19 HackTheBox - Lazy
HackTheBox - Lazy
IppSec
 20 Camp CTF 2015 - Bitterman
Camp CTF 2015 - Bitterman
IppSec
 21 HackTheBox - Devel
HackTheBox - Devel
IppSec
 22 Reversing Malicious Office Document (Macro) Emotet(?)
Reversing Malicious Office Document (Macro) Emotet(?)
IppSec
 23 HackTheBox - Granny and Grandpa
HackTheBox - Granny and Grandpa
IppSec
 24 HackTheBox - Pivoting Update: Granny and Grandpa
HackTheBox - Pivoting Update: Granny and Grandpa
IppSec
 25 HackTheBox - Optimum
HackTheBox - Optimum
IppSec
 26 HackTheBox - Charon
HackTheBox - Charon
IppSec
 27 HackTheBox - Sneaky
HackTheBox - Sneaky
IppSec
 28 HackTheBox - Holiday
HackTheBox - Holiday
IppSec
 29 HackTheBox - Apocalyst
HackTheBox - Apocalyst
IppSec
 30 HackTheBox - Europa
HackTheBox - Europa
IppSec
 31 Introduction to tmux
Introduction to tmux
IppSec
 32 HackTheBox - Blocky
HackTheBox - Blocky
IppSec
 33 HackTheBox - Nineveh
HackTheBox - Nineveh
IppSec
 34 HackTheBox - Jail
HackTheBox - Jail
IppSec
 35 HackTheBox - Blue
HackTheBox - Blue
IppSec
 36 HackTheBox - Calamity
HackTheBox - Calamity
IppSec
 37 HackTheBox - SolidState
HackTheBox - SolidState
IppSec
 38 HackTheBox - Shrek
HackTheBox - Shrek
IppSec
 39 HackTheBox - Mirai
HackTheBox - Mirai
IppSec
 40 HackTheBox - Shocker
HackTheBox - Shocker
IppSec
 41 HackTheBox - Mantis
HackTheBox - Mantis
IppSec
 42 HackTheBox - Node
HackTheBox - Node
IppSec
 43 HackTheBox - Kotarak
HackTheBox - Kotarak
IppSec
 44 HackTheBox - Enterprise
HackTheBox - Enterprise
IppSec
 45 HackTheBox - Sense
HackTheBox - Sense
IppSec
 46 HackTheBox - Minion
HackTheBox - Minion
IppSec
 47 VulnHub - Sokar
VulnHub - Sokar
IppSec
 48 VulnHub - Pinkys Palace v2
VulnHub - Pinkys Palace v2
IppSec
 49 HackTheBox - Inception
HackTheBox - Inception
IppSec
 50 Vulnhub - Trollcave 1.2
Vulnhub - Trollcave 1.2
IppSec
 51 HackTheBox - Ariekei
HackTheBox - Ariekei
IppSec
 52 HackTheBox - Bashed
HackTheBox - Bashed
IppSec
 53 HackTheBox - Flux Capacitor
HackTheBox - Flux Capacitor
IppSec
 54 HackTheBox - Jeeves
HackTheBox - Jeeves
IppSec
 55 HackTheBox - Tally
HackTheBox - Tally
IppSec
 56 HackTheBox - CrimeStoppers
HackTheBox - CrimeStoppers
IppSec
 57 HackTheBox - Fulcrum
HackTheBox - Fulcrum
IppSec
 58 HackTheBox - Chatterbox
HackTheBox - Chatterbox
IppSec
 59 HackTheBox - Falafel
HackTheBox - Falafel
IppSec
 60 HackTheBox - Nibbles
HackTheBox - Nibbles
IppSec
How to Spot Fake Bank Calls Instantly🤯| 3 Golden Rules to Escape
Next Up
How to Spot Fake Bank Calls Instantly🤯| 3 Golden Rules to Escape
Arivi by HCL GUVI