HackTheBox - Visual

Name: HackTheBox - Visual
Uploaded: 2024-02-24T15:00:15Z
Channel: IppSec
Description: 00:00 - Introduction 00:50 - Start of nmap 02:00 - Examining the request the server makes to us 04:15 - Using docker to run a Gitea Instance 06:20 - Usi...

IppSec · Beginner ·🧠 Large Language Models ·2y ago

00:00 - Introduction 00:50 - Start of nmap 02:00 - Examining the request the server makes to us 04:15 - Using docker to run a Gitea Instance 06:20 - Using docker to install a DotNet Container (make sure its the SDK!) 09:00 - Using the dotnet CLI to create a project and adding a solutions file to it 13:00 - Having the webapp download our repo, then looking at PreBuildEvents to execute commands before it is compiled 16:00 - Talking about why this PreBuildEvent exists 19:20 - Looking at why our build failed 21:30 - Adding a nishang reverse shell to the prebuild event 26:40 - Reverse Shell Return…

Watch on YouTube ↗ (saves to browser)

Chapters (15)

Introduction

0:50 Start of nmap

2:00 Examining the request the server makes to us

4:15 Using docker to run a Gitea Instance

6:20 Using docker to install a DotNet Container (make sure its the SDK!)

9:00 Using the dotnet CLI to create a project and adding a solutions file to it

13:00 Having the webapp download our repo, then looking at PreBuildEvents to execute

16:00 Talking about why this PreBuildEvent exists

19:20 Looking at why our build failed

21:30 Adding a nishang reverse shell to the prebuild event

26:40 Reverse Shell Returned!

29:45 Writing a webshell as Enox, to get a shell as the Apache Service User

34:00 Using FullPowers to restore our tokens while will enable the SeImpersonate pri

36:00 Grabbing a good PHP Reverse Shell Script that supports Windows!

39:15 Using GotPotato to abuse the SeImpersonate Privilege and run code as system

Playlist

Uploads from IppSec · IppSec · 0 of 60

← Previous Next →