HackTheBox - Mischief

Name: HackTheBox - Mischief
Uploaded: 2019-01-05T14:00:01Z
Channel: IppSec
Description: 01:20 - Begin of NMAP 02:30 - Extra nmaps, SNMP and AllPorts 04:00 - Playing with OneSixtyOne (SNMP BruteForce) 07:00 - Looking at SNMPWalk Output 08:40...

IppSec · Intermediate ·🔐 Cybersecurity ·7y ago

01:20 - Begin of NMAP 02:30 - Extra nmaps, SNMP and AllPorts 04:00 - Playing with OneSixtyOne (SNMP BruteForce) 07:00 - Looking at SNMPWalk Output 08:40 - Installing SNMP Mibs so SMPWalk is readable 10:05 - Accessing the box over Link Local IPv6 Address 14:00 - Looking at Por 3366 (Website), getting PW from SNMP Info 17:50 - Getting IPv6 Routable Address via SNMP 19:20 - NMAP the IPv6 Address 21:00 - Accessing the page over IPv6 23:00 - Getting output from the command execution page 24:55 - Viewing Credentials Files and accessing the box via SSH 29:00 - Examining why loki cannot use /bin/su (g…

Watch on YouTube ↗ (saves to browser)

Chapters (15)

1:20 Begin of NMAP

2:30 Extra nmaps, SNMP and AllPorts

4:00 Playing with OneSixtyOne (SNMP BruteForce)

7:00 Looking at SNMPWalk Output

8:40 Installing SNMP Mibs so SMPWalk is readable

10:05 Accessing the box over Link Local IPv6 Address

14:00 Looking at Por 3366 (Website), getting PW from SNMP Info

17:50 Getting IPv6 Routable Address via SNMP

19:20 NMAP the IPv6 Address

21:00 Accessing the page over IPv6

23:00 Getting output from the command execution page

24:55 Viewing Credentials Files and accessing the box via SSH

29:00 Examining why loki cannot use /bin/su (getfacl)

31:00 Getting a shell as www-data

40:30 Extra content, reading files via ICMP

Playlist

Uploads from IppSec · IppSec · 0 of 60

← Previous Next →