HTB: Blunder 0xdf hacks stuff
Por um escritor misterioso
Descrição
Blunder starts with a blog that I’ll find is hosted on the BludIt CMS. Some version enumeration and looking at releases on GitHub shows that this version is vulnerable to a bypass of the bruteforce protections, as well as an upload and execute filter bypass on the PHP site. I’ll write my own scripts for each of these, and use them to get a shell. From there, I’ll find creds for the next user, where I’ll find the first flag. Now I can also access sudo, where I’ll see I can run sudo to get a bash shell as any non-root user. I’ll exploit CVE-2019-14287 to run that as root, and get a root shell.
0xdf hacks stuff CTF solutions, malware analysis, home lab development
Machines - Hack The Box - Write-ups - Page 3 of 6 - HaXeZ
0xdf hacks stuff CTF solutions, malware analysis, home lab development
Interview with IppSec of and HackTheBox - The Security Noob.
Bucket - Mac Goodwin
0xdf (@0xdf_) / X
HTB — Blunder Walkthrough. Information Gathering and Enumeration:, by Clarence Subia
HTB: Blunder 0xdf hacks stuff
HTB] Blunder Walkthrough
HTB - PlayerTwo - HTB Writeups
Hack The Box :: PlayerTwo – noobintheshell :: blog
HTB: Blunder 0xdf hacks stuff