VulnHub - Sokar

Name: VulnHub - Sokar
Uploaded: 2018-04-06T20:53:08Z
Channel: IppSec
Description: 01:08 - Start of Recon (NetDiscover/Masscan/Nmap) 05:37 - Finding the CGI Script and using Shellshock 10:00 - Start creating ShellShock python script 16...

IppSec · Beginner ·🔐 Cybersecurity ·7y ago

01:08 - Start of Recon (NetDiscover/Masscan/Nmap) 05:37 - Finding the CGI Script and using Shellshock 10:00 - Start creating ShellShock python script 16:08 - Converting script "Forward Shell" for FW Evasion with mkfifo 40:00 - Adding Threading (Background Task) to improve script 45:00 - Script completed - Attempt to enumerate FW Rules 49:00 - Fumbling around with IPv6 (Check out Sneaky Video for more) 53:25 - Reverse shell via IPv6 and ncat 01:05:00 - Reading Bynarr's mail to get password and PrivEsc via LIME/Memory Dum p 1:07:20 - Unintended PrivEsc via ShellShock + Environment Variables 1:18…

Watch on YouTube ↗ (saves to browser)

Chapters (16)

1:08 Start of Recon (NetDiscover/Masscan/Nmap)

5:37 Finding the CGI Script and using Shellshock

10:00 Start creating ShellShock python script

16:08 Converting script "Forward Shell" for FW Evasion with mkfifo

40:00 Adding Threading (Background Task) to improve script

45:00 Script completed - Attempt to enumerate FW Rules

49:00 Fumbling around with IPv6 (Check out Sneaky Video for more)

53:25 Reverse shell via IPv6 and ncat

1:05:00 Reading Bynarr's mail to get password and PrivEsc via LIME/Memory Dum

1:07:20 Unintended PrivEsc via ShellShock + Environment Variables

1:18:20 Begin of MITM (Man in the Middle) First with Ettercap

1:24:19 Installing Bettercap2 + Usage

1:33:40 Spoofing ARP and DNS with BetterCap

1:41:11 Privesc to root via Git on case-insensitive FS

1:53:30 Woot root, lets take a look at the IPTable FW

1:56:00 Explaining the exploit a bit better

Playlist

Uploads from IppSec · IppSec · 47 of 60

← Previous Next →