Hacking Articles Tips Tricks Videos Tutorials
468 subscribers
65.8K photos
15 videos
157 files
132K links
Exploit
Pentesting
Hacking
Red Team
Blue Team
Kali Linux
Bug Bounty
Black Hat
Cyber security etc

@Hacking_Video
@Hacking_attack
Download Telegram
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking Articles|Raj Chandel's Blog
Bounty hunter HackTheBox Walkthrough

Bounty hunter is a CTF Linux machine with an Easy difficulty rating on the Hack the Box platform. So let's get started and take a deep dive into disassembling this machine utilizing the methods outlined below. Pentesting Methodology● nmapExploitation● burp suitePrivilege Escalation● sshLevel: EasyTo begin, we'll perform nmap scan to look for open ports. As can be seen, two ports are open:22.80 is used to run the http service.nmap -sC -sV 10.129.95.166portal."vulnerable. ___________________________
@hacking_Attack
@Hacking_Video
Hacking Articles Tips Tricks Videos Tutorials
Hacking Articles|Raj Chandel's Blog Bounty hunter HackTheBox Walkthrough Bounty hunter is a CTF Linux machine with an Easy difficulty rating on the Hack the Box platform. So let's get started and take a deep dive into disassembling this machine utilizing…
db.php file, nothing intruding was discovered.dirb http://10.129.95.166 -X .phpIt signifies that there is a database file available in which all of the data will be stored.ExploitationWe will now begin our exploitation procedure with the burp suite. Try to capture its data by submitting a request for a more in-depth investigation. As a result, we used similar strategies on the beta version of the Bounty Report submission page.dbserver = "localhost"https://blogger.googleusercontent.com/img/a/AVvXsEjInj-7vYOrJo1AqARhb4NB2EjGu-RT4Mno6bkmTSo1YhHe-CReG5sbFI9tmWTxzWFmcy1Pv01pSHzY1KLunoXzeBVoXePHxAyYndd1bWur52vFbE9EL0AFq72QpRcZ2MhgiDiME9eDhSCtC7oBxQ_NtNeeXfoPEbiibjkDkc0-SdYNZ23awnus3YOB8g=s16000 /etc/passwdfile using this mechanism must obtain its encoded value in order to request this file from the target machine.development.___________________________
@hacking_Attack
@Hacking_Video
Hacking Articles Tips Tricks Videos Tutorials
db.php file, nothing intruding was discovered.dirb http://10.129.95.166 -X .phpIt signifies that there is a database file available in which all of the data will be stored.ExploitationWe will now begin our exploitation procedure with the burp suite. Try to…
iCy-m23hkwDzGn8KmsPU9zgSho232Y3BPBpK7zNv-1nAT8A-Pss2IvEDLVGCs_duYdztfx9glQwc6Ox0abCbpT76k4SKfBWs1xaCahWFK84bWDXg9hbg=s16000 Privilege EscalationWe have credentials, and we know that ssh is operating on port 22. Now is the optimal moment to begin the privilege escalation process using an ssh login with the password which we got earlier.ssh development@10.129.95.166We successfully logged into the development and immediately we checked its id to verify its details. Searching for a little bit we found the user flag.cat user.txthttps://blogger.googleusercontent.com/img/a/AVvXsEi12-lTXyxuz4WFFLIhTt9ZPfyyzDQLT7BjxotbJWcwMckNLR8heq7wSAKK4p5kiZLrzsGvqdE9xQUI3dvEjAre9NNDf0DtcRNgo6dswePFu_2hnngGLlo9W2TgIUGnHK2TfeGxhGeJIvoiSNN-0Mn2G5mI9vz1-eUFbauEmohKC7lylYQrlwxQ9hllaQ=s16000 sudo -lSo, we reviewed this file to analyse it, and we got some points, but nothing exciting came out of it.file.md).cat file.mdfile.md).sudo /usr/bin/python3.8 /opt/skytrain_inc/ticketValidator.pyYippee!! We found the root. We immediately went to the root directory and received our well-deserved root flag.Author: Shubham Sharma is a passionate Cybersecurity Researcher, contact LinkedInand Twitter.___________________________
@hacking_Attack
@Hacking_Video