Hacking Articles Tips Tricks Videos Tutorials

Hacking Articles|Raj Chandel's Blog
Spectra HacktheBox Walkthrough

Today we are going to accept the boot2root challenge of Spectra –Hack the box lab. Through this lab, we are going to check our skills in WordPress Exploitation and basic privilege escalation.

Table Of ContentReconnaissanceReconnaissanceLet’s start our journey.HTTP, and port 3306 –MySQL.Enumerationhttps://1.bp.blogspot.com/-loLsLzkUk-w/YVMeUMH_54I/AAAAAAAAytk/nBBH1zVv8ukW8mFTocNOdtlpY_uzS0fJgCLcBGAsYHQ/s16000/1.png Exploitation___________________________
@hacking_Attack
@Hacking_Video

Blogspot

Spectra HacktheBox Walkthrough

Hacking Articles is a very interesting blog about information security, penetration testing and vulnerability assessment managed by Raj Chandel.

8 viewsedited 14:40

Hacking Articles Tips Tricks Videos Tutorials

Hacking Articles|Raj Chandel's Blog Spectra HacktheBox Walkthrough Today we are going to accept the boot2root challenge of Spectra –Hack the box lab. Through this lab, we are going to check our skills in WordPress Exploitation and basic privilege escalation.…

fetched the username and password i.e. administrator and devteam01 respectively. Below is the module:Privilege EscalationSSH to user Katie, as we have the password for it. Through the id command, we get to know that there is one developer’s group, simultaneously we will check the sudoers permission we come across that user Katie has root permission for /sbin/initctl. Now, exploring the developers' group there we get the test config files. Then open the test configuration file, which is stored at "/etc/init," as shown below.dev/null –ls___________________________
@hacking_Attack
@Hacking_Video

8 viewsedited 14:40

Hacking Articles Tips Tricks Videos Tutorials

Dark Reading: Attacks/Breaches
Modern Security Breaches Demand Diligent Planning and Executive Support

Teams that remain reactive will always be on the back foot — take an active stance.

7 views15:40

Source

Hacking Articles Tips Tricks Videos Tutorials

Dark Reading: Attacks/Breaches
Notorious Spyware Tool Found Hiding Beneath Four Layers of Obfuscation

FinFisher (aka FinSpy) surveillance software now goes to extreme lengths to duck analysis and discovery, researchers found in a months-long investigation.

7 views15:40

Source

Hacking Articles Tips Tricks Videos Tutorials

Exploiting Web cache deception(WCD)
https://medium.com/@behnam.yazdanpanah/exploiting-web-cache-deception-wcd-11697f8dd709?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Medium

Exploiting Web cache deception(WCD)

next time I will talk about Combining Path confusion with Web cache deception.

6 viewsedited 15:50

Hacking Articles Tips Tricks Videos Tutorials

7 views15:50

Hacking Articles Tips Tricks Videos Tutorials

next time I will talk about Combining Path confusion with Web cache deception.Continue reading on Medium » (https://medium.com/@behnam.yazdanpanah/exploiting-web-cache-deception-wcd-11697f8dd709?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video