Vulnhub - Trollcave 1.2

Name: Vulnhub - Trollcave 1.2
Uploaded: 2018-04-16T03:51:58Z
Channel: IppSec
Description: The CSRF Video I refer to is here: https://www.youtube.com/watch?v=d2nVDoVr0jE at 42m 01:20 - Start of Recon, nmap + dump web users 03:35 - Writing Pyth...

IppSec · Beginner ·🔐 Cybersecurity ·7y ago

The CSRF Video I refer to is here: https://www.youtube.com/watch?v=d2nVDoVr0jE at 42m 01:20 - Start of Recon, nmap + dump web users 03:35 - Writing Python Program to dump uers. 12:00 - Dumping Users/Group done. Now to dump PW Hints 24:00 - Python coding done. 24:57 - Examining the PW Reset Functionality, reset King (Unintended) 29:40 - Start of examining File Upload 33:37 - Finding local user + Exploiting File Upload 35:45 - Unintended Privilege Kernel Escalation (CVE-2017-16995) ----- Box Done, Rest is extra content ----- 41:45 - Stealing CoolDude89's Cookie to gain Moderator Access 01:01:0…

Watch on YouTube ↗ (saves to browser)

Chapters (14)

1:20 Start of Recon, nmap + dump web users

3:35 Writing Python Program to dump uers.

12:00 Dumping Users/Group done. Now to dump PW Hints

24:00 Python coding done.

24:57 Examining the PW Reset Functionality, reset King (Unintended)

29:40 Start of examining File Upload

33:37 Finding local user + Exploiting File Upload

35:45 Unintended Privilege Kernel Escalation (CVE-2017-16995)

41:45 Stealing CoolDude89's Cookie to gain Moderator Access

1:01:00 Playing with moderator function to promote user to Admin

1:09:50 Using Admin Permission to unmod admin and gain access to PM's

1:14:50 Poking around the box looking for intended PrivEsc

1:22:50 Exploiting Calc NodeJS App on Port 88

1:36:45 Final Exploits of Calc App

Playlist

Uploads from IppSec · IppSec · 50 of 60

← Previous Next →