HackTheBox - Sau

IppSec · Beginner ·🔐 Cybersecurity ·2y ago

Skills: Network Security80%Ethical Hacking & Pen Testing70%

Key Takeaways

Performs an nmap scan, examines a website, and exploits a Server-Side Request Forgery vulnerability to gain a shell on a HackTheBox machine

Original Description

00:00 - Intro 00:40 - Start of nmap 02:00 - Examining the website, playing with the basket, trying SSTI/SQL Injection special characters 04:30 - Looking at the settings, discovering we can perform a SSRF and get the response back. Grabbing localhost:80 06:10 - The local website runs maltrail 0.53, examining the exploit then manually exploiting it to get a shell 09:10 - Shell returned, checking if we really needed to encode the payload 13:00 - When systemctl runs status, it sends us to less which we can escape out of and run as root

Watch on YouTube ↗ (saves to browser)

Sign in to unlock AI tutor explanation · ⚡30

Playlist

Uploads from IppSec · IppSec · 0 of 60

← Previous Next →

HHC2016 - Analytics

HHC2016 - Analytics

HackTheBox - October

HackTheBox - October

HackTheBox - Arctic

HackTheBox - Arctic

HackTheBox - Brainfuck

HackTheBox - Brainfuck

HackTheBox - Bank

HackTheBox - Bank

HackTheBox - Joker

HackTheBox - Joker

HackTheBox - Lazy

HackTheBox - Lazy

Camp CTF 2015 - Bitterman

Camp CTF 2015 - Bitterman

HackTheBox - Devel

HackTheBox - Devel

Reversing Malicious Office Document (Macro) Emotet(?)

Reversing Malicious Office Document (Macro) Emotet(?)

HackTheBox - Granny and Grandpa

HackTheBox - Granny and Grandpa

HackTheBox - Pivoting Update: Granny and Grandpa

HackTheBox - Pivoting Update: Granny and Grandpa

HackTheBox - Optimum

HackTheBox - Optimum

HackTheBox - Charon

HackTheBox - Charon

HackTheBox - Sneaky

HackTheBox - Sneaky

HackTheBox - Holiday

HackTheBox - Holiday

HackTheBox - Europa

HackTheBox - Europa

Introduction to tmux

Introduction to tmux

HackTheBox - Blocky

HackTheBox - Blocky

HackTheBox - Nineveh

HackTheBox - Nineveh

HackTheBox - Jail

HackTheBox - Jail

HackTheBox - Blue

HackTheBox - Blue

HackTheBox - Calamity

HackTheBox - Calamity

HackTheBox - Shrek

HackTheBox - Shrek

HackTheBox - Mirai

HackTheBox - Mirai

HackTheBox - Shocker

HackTheBox - Shocker

HackTheBox - Mantis

HackTheBox - Mantis

HackTheBox - Node

HackTheBox - Node

HackTheBox - Kotarak

HackTheBox - Kotarak

HackTheBox - Enterprise

HackTheBox - Enterprise

HackTheBox - Sense

HackTheBox - Sense

HackTheBox - Minion

HackTheBox - Minion

VulnHub - Sokar

VulnHub - Sokar

VulnHub - Pinkys Palace v2

VulnHub - Pinkys Palace v2

HackTheBox - Inception

HackTheBox - Inception

Vulnhub - Trollcave 1.2

Vulnhub - Trollcave 1.2

HackTheBox - Ariekei

HackTheBox - Ariekei

HackTheBox - Flux Capacitor

HackTheBox - Flux Capacitor

HackTheBox - Jeeves

HackTheBox - Jeeves

HackTheBox - Tally

HackTheBox - Tally

HackTheBox - CrimeStoppers

HackTheBox - CrimeStoppers

HackTheBox - Fulcrum

HackTheBox - Fulcrum

HackTheBox - Chatterbox

HackTheBox - Chatterbox

HackTheBox - Falafel

HackTheBox - Falafel

How To Create Empire Modules

How To Create Empire Modules

HackTheBox - Nightmare

HackTheBox - Nightmare

HackTheBox - Nightmarev2 - Speed Run/Unintended Solutions

HackTheBox - Nightmarev2 - Speed Run/Unintended Solutions

HackTheBox - Bart

HackTheBox - Bart

HackTheBox - Aragog

HackTheBox - Aragog

HackTheBox - Valentine

HackTheBox - Valentine

HackTheBox - Silo

HackTheBox - Silo

HackTheBox - Rabbit

HackTheBox - Rabbit

HackTheBox - Celestial

HackTheBox - Celestial

HackTheBox - Stratosphere

HackTheBox - Stratosphere

HackTheBox - Poison

HackTheBox - Poison

HackTheBox - Canape

HackTheBox - Canape

HackTheBox - Olympus

HackTheBox - Olympus

HackTheBox - Sunday

HackTheBox - Sunday

HackTheBox - Fighter

HackTheBox - Fighter

HackTheBox - Bounty

HackTheBox - Bounty

More on: Network Security

View skill →

GNS3 Labs: DMVPN, IPsec and NAT across BGP Internet routers: Answers Part 7

GNS3 Labs: DMVPN, IPsec and NAT across BGP Internet routers: Answers Part 7

Building a High-throughput VPN

Configuring Network Connectivity Center as a Transit Hub

VPC Flow Logs - Analyzing Network Traffic

HackTheBox - Intentions

HackTheBox - Intentions

Google Cloud Packet Mirroring with OpenSource IDS

Related AI Lessons

5G Security: Why Most Operators Are Underprepared for the Threats Standalone Architecture Introduces

Learn why 5G standalone architecture introduces new security threats and how operators can prepare for them

Dev.to · 5gwolrdpro

Dangerous Trends

Behavioral monitoring informs but cannot replace authorization boundaries, crucial for security

Dangerous Trends

Learn why behavioral monitoring is not a replacement for authorization boundaries in cybersecurity

Medium · Cybersecurity

900+ Downloads, 1 Star, 1 Comment: What I Learned Launching a Security Tool

Learn from a developer's experience launching an open-source security tool, with insights on what worked and what didn't, and key takeaways for improving your own project's success

Dev.to · Dockfix Labs

Chapters (7)

Intro

0:40 Start of nmap

2:00 Examining the website, playing with the basket, trying SSTI/SQL Injection spec

4:30 Looking at the settings, discovering we can perform a SSRF and get the respons

6:10 The local website runs maltrail 0.53, examining the exploit then manually expl

9:10 Shell returned, checking if we really needed to encode the payload

13:00 When systemctl runs status, it sends us to less which we can escape out of and

You Think Your Card Declined by Mistake? It Might Be a 2026 Scam

Tolulope Michael