HackTheBox - MonitorsTwo

Name: HackTheBox - MonitorsTwo
Uploaded: 2023-09-02T15:00:25Z
Channel: IppSec
Description: 00:00 - Intro 01:02 - Start of nmap 01:50 - Discovering Cacti version and finding a vulnerability 03:50 - Sending the payload from the description, disc...

IppSec · Beginner ·🔐 Cybersecurity ·2y ago

00:00 - Intro 01:02 - Start of nmap 01:50 - Discovering Cacti version and finding a vulnerability 03:50 - Sending the payload from the description, discovering we need to set the X-FORWARDED-FOR 05:00 - Incrementing Host_ID and Local_Data_Ids and discovering different output 06:15 - Discovering with local_data_ids set to 6 and host_id set to 1, we can get code execution 06:50 - Showing the python exploit and showing it blindly spray, looking at the Metasploit module for some more info 10:40 - Getting a reverse shell 11:30 - Using Script to set up our PTY since python is not installed 13:40 - C…

Watch on YouTube ↗ (saves to browser)

Chapters (15)

Intro

1:02 Start of nmap

1:50 Discovering Cacti version and finding a vulnerability

3:50 Sending the payload from the description, discovering we need to set the X-FOR

5:00 Incrementing Host_ID and Local_Data_Ids and discovering different output

6:15 Discovering with local_data_ids set to 6 and host_id set to 1, we can get code

6:50 Showing the python exploit and showing it blindly spray, looking at the Metasp

10:40 Getting a reverse shell

11:30 Using Script to set up our PTY since python is not installed

13:40 Connecting to the MySQL Database and then cracking passwords

18:25 SSH into the box with Marcus and discovering mail on the box

20:20 Discovering Docker is old and vulnerable to CVE-2021-41091

21:55 Looking at the docker overlayfs directories, discovering we can go in them, fi

23:10 Using CapSH to escalate privileges on our docker container so we can make Bash

24:50 Executing bash -p to get root

Playlist

Uploads from IppSec · IppSec · 0 of 60

← Previous Next →