HackTheBox - Usage

Name: HackTheBox - Usage
Uploaded: 2024-08-10T15:00:37Z
Channel: IppSec
Description: 00:00 - Introduction 00:50 - Start of nmap 02:00 - Discovering the page is Laravel based upon cookies 05:30 - Discovering the SQL Injection in Reset Pas...

IppSec · Beginner ·🔐 Cybersecurity ·1y ago

00:00 - Introduction 00:50 - Start of nmap 02:00 - Discovering the page is Laravel based upon cookies 05:30 - Discovering the SQL Injection in Reset Password, then running SQLMap screwing up our results because we logged out in middle of SQLMap 18:50 - Cracking the user out of admin_users 20:00 - Logging into admin.usage.htb and discovering a vulnerable Laravel Admin, which is vulnerable to PHP File Upload in the avatar 24:10 - Shell returned on the box 28:30 - Discovering we can run 7z with sudo and the Wildcard Spare Trick will let us read files

Watch on YouTube ↗ (saves to browser)

Chapters (8)

Introduction

0:50 Start of nmap

2:00 Discovering the page is Laravel based upon cookies

5:30 Discovering the SQL Injection in Reset Password, then running SQLMap screwing

18:50 Cracking the user out of admin_users

20:00 Logging into admin.usage.htb and discovering a vulnerable Laravel Admin, which

24:10 Shell returned on the box

28:30 Discovering we can run 7z with sudo and the Wildcard Spare Trick will let us r

Playlist

Uploads from IppSec · IppSec · 0 of 60

← Previous Next →