Vulnhub - Trollcave 1.2

IppSec · Beginner ·🔐 Cybersecurity ·8y ago
The CSRF Video I refer to is here: https://www.youtube.com/watch?v=d2nVDoVr0jE at 42m 01:20 - Start of Recon, nmap + dump web users 03:35 - Writing Python Program to dump uers. 12:00 - Dumping Users/Group done. Now to dump PW Hints 24:00 - Python coding done. 24:57 - Examining the PW Reset Functionality, reset King (Unintended) 29:40 - Start of examining File Upload 33:37 - Finding local user + Exploiting File Upload 35:45 - Unintended Privilege Kernel Escalation (CVE-2017-16995) ----- Box Done, Rest is extra content ----- 41:45 - Stealing CoolDude89's Cookie to gain Moderator Access 01:01:00 - Playing with moderator function to promote user to Admin 01:09:50 - Using Admin Permission to unmod admin and gain access to PM's 01:14:50 - Poking around the box looking for intended PrivEsc 01:22:50 - Exploiting Calc NodeJS App on Port 88 01:36:45 - Final Exploits of Calc App Troll Cave VM Download: https://www.vulnhub.com/entry/trollcave-12,230/

What You'll Learn

Exploits Vulnhub Trollcave 1.2 using Nmap, Python programming, and CSRF to dump users and passwords

Watch on YouTube ↗ (saves to browser)
Sign in to unlock AI tutor explanation · ⚡30

Playlist

Uploads from IppSec · IppSec · 36 of 60

← Previous Next →
1 HHC2016 - Analytics
HHC2016 - Analytics
IppSec
 2 HackTheBox - October
HackTheBox - October
IppSec
 3 HackTheBox - Arctic
HackTheBox - Arctic
IppSec
 4 HackTheBox - Brainfuck
HackTheBox - Brainfuck
IppSec
 5 HackTheBox - Bank
HackTheBox - Bank
IppSec
 6 HackTheBox - Joker
HackTheBox - Joker
IppSec
 7 HackTheBox - Lazy
HackTheBox - Lazy
IppSec
 8 Camp CTF 2015 - Bitterman
Camp CTF 2015 - Bitterman
IppSec
 9 HackTheBox - Devel
HackTheBox - Devel
IppSec
 10 Reversing Malicious Office Document (Macro) Emotet(?)
Reversing Malicious Office Document (Macro) Emotet(?)
IppSec
 11 HackTheBox - Granny and Grandpa
HackTheBox - Granny and Grandpa
IppSec
 12 HackTheBox - Pivoting Update: Granny and Grandpa
HackTheBox - Pivoting Update: Granny and Grandpa
IppSec
 13 HackTheBox - Optimum
HackTheBox - Optimum
IppSec
 14 HackTheBox - Charon
HackTheBox - Charon
IppSec
 15 HackTheBox - Sneaky
HackTheBox - Sneaky
IppSec
 16 HackTheBox - Holiday
HackTheBox - Holiday
IppSec
 17 HackTheBox - Europa
HackTheBox - Europa
IppSec
 18 Introduction to tmux
Introduction to tmux
IppSec
 19 HackTheBox - Blocky
HackTheBox - Blocky
IppSec
 20 HackTheBox - Nineveh
HackTheBox - Nineveh
IppSec
 21 HackTheBox - Jail
HackTheBox - Jail
IppSec
 22 HackTheBox - Blue
HackTheBox - Blue
IppSec
 23 HackTheBox - Calamity
HackTheBox - Calamity
IppSec
 24 HackTheBox - Shrek
HackTheBox - Shrek
IppSec
 25 HackTheBox - Mirai
HackTheBox - Mirai
IppSec
 26 HackTheBox - Shocker
HackTheBox - Shocker
IppSec
 27 HackTheBox - Mantis
HackTheBox - Mantis
IppSec
 28 HackTheBox - Node
HackTheBox - Node
IppSec
 29 HackTheBox - Kotarak
HackTheBox - Kotarak
IppSec
 30 HackTheBox - Enterprise
HackTheBox - Enterprise
IppSec
 31 HackTheBox - Sense
HackTheBox - Sense
IppSec
 32 HackTheBox - Minion
HackTheBox - Minion
IppSec
 33 VulnHub - Sokar
VulnHub - Sokar
IppSec
 34 VulnHub - Pinkys Palace v2
VulnHub - Pinkys Palace v2
IppSec
 35 HackTheBox - Inception
HackTheBox - Inception
IppSec
 ▶ Vulnhub - Trollcave 1.2
Vulnhub - Trollcave 1.2
IppSec
 37 HackTheBox - Ariekei
HackTheBox - Ariekei
IppSec
 38 HackTheBox - Flux Capacitor
HackTheBox - Flux Capacitor
IppSec
 39 HackTheBox - Jeeves
HackTheBox - Jeeves
IppSec
 40 HackTheBox - Tally
HackTheBox - Tally
IppSec
 41 HackTheBox - CrimeStoppers
HackTheBox - CrimeStoppers
IppSec
 42 HackTheBox - Fulcrum
HackTheBox - Fulcrum
IppSec
 43 HackTheBox - Chatterbox
HackTheBox - Chatterbox
IppSec
 44 HackTheBox - Falafel
HackTheBox - Falafel
IppSec
 45 How To Create Empire Modules
How To Create Empire Modules
IppSec
 46 HackTheBox - Nightmare
HackTheBox - Nightmare
IppSec
 47 HackTheBox - Nightmarev2 - Speed Run/Unintended Solutions
HackTheBox - Nightmarev2 - Speed Run/Unintended Solutions
IppSec
 48 HackTheBox - Bart
HackTheBox - Bart
IppSec
 49 HackTheBox - Aragog
HackTheBox - Aragog
IppSec
 50 HackTheBox - Valentine
HackTheBox - Valentine
IppSec
 51 HackTheBox - Silo
HackTheBox - Silo
IppSec
 52 HackTheBox - Rabbit
HackTheBox - Rabbit
IppSec
 53 HackTheBox - Celestial
HackTheBox - Celestial
IppSec
 54 HackTheBox - Stratosphere
HackTheBox - Stratosphere
IppSec
 55 HackTheBox - Poison
HackTheBox - Poison
IppSec
 56 HackTheBox - Canape
HackTheBox - Canape
IppSec
 57 HackTheBox - Olympus
HackTheBox - Olympus
IppSec
 58 HackTheBox - Sunday
HackTheBox - Sunday
IppSec
 59 HackTheBox - Fighter
HackTheBox - Fighter
IppSec
 60 HackTheBox - Bounty
HackTheBox - Bounty
IppSec

Related AI Lessons

⚡
How to Keep Customer Payment Data Secure and PCI-Compliant on a Tight Budget
Secure customer payment data on a tight budget by shrinking PCI scope and following compliance best practices
Dev.to AI
 ⚡
Data Breach at Indian Supplier Tata Electronics Exposes iPhone 18 Pro Details and Photos
A data breach at Tata Electronics exposes iPhone 18 Pro details, threatening Apple's supply chain security and highlighting the importance of cybersecurity in the tech industry
Daring Fireball
 ⚡
Google put encryption inside phone calls because AI can now fake your mom’s voice It only works if…
Google has implemented encryption in phone calls to combat AI-generated fake voices, which can only be detected if the caller is using the right app
Medium · Cybersecurity
 ⚡
Nigeria’s CBN Data Localisation Directive: What Most People Are Missing
Nigeria's Central Bank data localization directive is more than a compliance exercise, it's a step towards digital sovereignty
Medium · Cybersecurity

Chapters (14)

1:20 Start of Recon, nmap + dump web users
3:35 Writing Python Program to dump uers.
12:00 Dumping Users/Group done. Now to dump PW Hints
24:00 Python coding done.
24:57 Examining the PW Reset Functionality, reset King (Unintended)
29:40 Start of examining File Upload
33:37 Finding local user + Exploiting File Upload
35:45 Unintended Privilege Kernel Escalation (CVE-2017-16995)
41:45 Stealing CoolDude89's Cookie to gain Moderator Access
1:01:00 Playing with moderator function to promote user to Admin
1:09:50 Using Admin Permission to unmod admin and gain access to PM's
1:14:50 Poking around the box looking for intended PrivEsc
1:22:50 Exploiting Calc NodeJS App on Port 88
1:36:45 Final Exploits of Calc App
Up next
You Think Your Card Declined by Mistake? It Might Be a 2026 Scam
Tolulope Michael
Watch →