HackTheBox - Outbound

Name: HackTheBox - Outbound
Uploaded: 2025-11-15T15:00:16Z
Channel: IppSec
Description: 00:00 - Introduction 01:00 - Start of nmap 02:00 - Logging into RoudnCube with the assume breach credentials, getting the version and searching for expl...

IppSec · Beginner ·📊 Data Analytics & Business Intelligence ·4mo ago

00:00 - Introduction 01:00 - Start of nmap 02:00 - Logging into RoudnCube with the assume breach credentials, getting the version and searching for exploits 05:00 - Running the CVE-2025-49113 POC to get a shell on the box 07:50 - Taking a step back and just examining the payload for the POC and talking about the attack a little 11:55 - Logging into MySQL and poking at the database 14:00 - Looking at the Sessions Table and discovering the password is stored encrypted in the session. Decrypting it with the Roundcube utility 19:00 - Showing how to decrypt the data manually via cyber chef 22:00 …

Watch on YouTube ↗ (saves to browser)

Chapters (10)

Introduction

1:00 Start of nmap

2:00 Logging into RoudnCube with the assume breach credentials, getting the version

5:00 Running the CVE-2025-49113 POC to get a shell on the box

7:50 Taking a step back and just examining the payload for the POC and talking abou

11:55 Logging into MySQL and poking at the database

14:00 Looking at the Sessions Table and discovering the password is stored encrypted

19:00 Showing how to decrypt the data manually via cyber chef

22:00 Logged in, discovering we can run Below with Sudo, seeing the source code is o

24:15 Exploiting Below version 0.8.0 via CVE-2025-27591

Playlist

Uploads from IppSec · IppSec · 0 of 60

← Previous Next →

HackTheBox - Outbound

Chapters (10)

Playlist

Lesson complete!