HackTheBox - Nibbles

Name: HackTheBox - Nibbles
Uploaded: 2018-06-30T15:05:46Z
Channel: IppSec
Description: 00:18 - Start of Recon 01:15 - Finding hidden directory via Source 02:15 - Downloading NibbleBlog to help us with finding version information 03:59 - Id...

IppSec · Beginner ·🛡️ AI Safety & Ethics ·7y ago

00:18 - Start of Recon 01:15 - Finding hidden directory via Source 02:15 - Downloading NibbleBlog to help us with finding version information 03:59 - Identifying what vresion of NibblesBlog is running 04:42 - Using SearchSploit to find vulnerabilities 05:36 - Examining the Exploit 06:08 - Explanation of exploit 07:25 - Attempting to find valid usernames for NibblesBlog 09:13 - Finding usernames in /content/private 10:15 - Using Hydra to attempt to bruteforce 14:08 - Oh crap. Hydra not good idea we're blocked... -- Some minor panicing about how to continue 15:40 - Using SSH Proxies to hit nibbl…

Watch on YouTube ↗ (saves to browser)

Chapters (19)

0:18 Start of Recon

1:15 Finding hidden directory via Source

2:15 Downloading NibbleBlog to help us with finding version information

3:59 Identifying what vresion of NibblesBlog is running

4:42 Using SearchSploit to find vulnerabilities

5:36 Examining the Exploit

6:08 Explanation of exploit

7:25 Attempting to find valid usernames for NibblesBlog

9:13 Finding usernames in /content/private

10:15 Using Hydra to attempt to bruteforce

14:08 Oh crap. Hydra not good idea we're blocked...

15:40 Using SSH Proxies to hit nibbles from another box (Falafel)

18:20 Guessing the password

20:10 Logged in, lets attempt our exploit!

22:46 Code Execution achieved. Lets get a reverse shell

24:53 Reverse shell returned.

26:00 Running sudo -l examine sudoer, then finding out why sudo took forever to retu

26:50 Privesc via bad sudo rules

32:10 Alternative PrivEsc via RationalLove

Playlist

Uploads from IppSec · IppSec · 60 of 60

← Previous Next →