HackTheBox - Sightless

Name: HackTheBox - Sightless
Uploaded: 2025-01-11T15:00:13Z
Channel: IppSec
Description: 00:00 - Introduction 01:00 - Start of nmap 03:30 - Discovering SQLPad 06:20 - Discovering a SSRF in SQLPad when adding connections. Sending to FFUF, use...

IppSec · Beginner ·🔐 Cybersecurity ·1y ago

00:00 - Introduction 01:00 - Start of nmap 03:30 - Discovering SQLPad 06:20 - Discovering a SSRF in SQLPad when adding connections. Sending to FFUF, use a time filter to show timeouts 10:01 - Finding the SQLPad Version (6.10.0), which has a template injection vulnerability getting a shell 14:25 - Shell returned, extracting the SQLPad database 17:45 - Cracking the shadow file of the docker container to get michaels password 21:05 - Shell as Michael, discovering headless chrome is running forwarding ports to access it 26:55 - Logging into froxlor, getting RCE as root by changing PHP-FPM Configu…

Watch on YouTube ↗ (saves to browser)

Chapters (12)

Introduction

1:00 Start of nmap

3:30 Discovering SQLPad

6:20 Discovering a SSRF in SQLPad when adding connections. Sending to FFUF, use a t

10:01 Finding the SQLPad Version (6.10.0), which has a template injection vulnerabil

14:25 Shell returned, extracting the SQLPad database

17:45 Cracking the shadow file of the docker container to get michaels password

21:05 Shell as Michael, discovering headless chrome is running forwarding ports to a

26:55 Logging into froxlor, getting RCE as root by changing PHP-FPM Configuration

32:40 Doing the box the intended way, getting Froxlor Cookie via XSS

44:30 Changing the Web1 users password so we can FTP Into the box

49:00 Cracking the Keepass database to get root ssh key

Playlist

Uploads from IppSec · IppSec · 0 of 60

← Previous Next →