HackTheBox - Shared

Name: HackTheBox - Shared
Uploaded: 2022-11-12T15:11:31Z
Channel: IppSec
Description: 00:00 - Intro 01:00 - Start of nmap 02:30 - Taking a look at the website 03:00 - Searching the PrestaShop github to find a way to fingerprint the websit...

IppSec · Beginner ·🔐 Cybersecurity ·3y ago

00:00 - Intro 01:00 - Start of nmap 02:30 - Taking a look at the website 03:00 - Searching the PrestaShop github to find a way to fingerprint the website, discovering INSTALL.TXT then finding the commit that contains our version 07:10 - Discovering checkout.shared.htb 08:14 - Examining how the checkout subdomain gets the contents of the shipping cart (cookies), editing the cookie and seeing what happens 09:45 - Testing for SQL Injection within the cookie 12:20 - Failing to use SQLMap (Debug it at the end of the video) 14:40 - Doing the Union SQL Injection manually to enumerate Information Sche…

Watch on YouTube ↗ (saves to browser)

Chapters (21)

Intro

1:00 Start of nmap

2:30 Taking a look at the website

3:00 Searching the PrestaShop github to find a way to fingerprint the website, disc

7:10 Discovering checkout.shared.htb

8:14 Examining how the checkout subdomain gets the contents of the shipping cart (c

9:45 Testing for SQL Injection within the cookie

12:20 Failing to use SQLMap (Debug it at the end of the video)

14:40 Doing the Union SQL Injection manually to enumerate Information Schema then du

18:45 Cracking the password for James_Mason and gaining SSH Access

21:00 Finding files modified between two dates on linux and discovering some interes

22:30 Grabbing passwords from the web directory

26:00 Discovering iPython is opened every minute based upon the history file

27:20 Telling LinPeas to look for unique processes and discovering the directory iPy

31:45 Creating a malicious profile to gain code execution when ipython is opened and

35:00 Discovering a golang program that utilizes Redis, copying the binary to our bo

37:00 Having Redis connect to netcat and getting the password in clear text

38:00 Enumerating Redis

39:00 Creating a malicious Redis Module, loading it within Redis and getting code ex

41:25 Getting a reverse shell as root

42:00 Going back and getting SQLMap to run. Enabling Debug so we can see the request

Playlist

Uploads from IppSec · IppSec · 0 of 60

← Previous Next →