Hackthebox Luke Speedrun

Summary

Plain password in config.php - Credentials in NodeJS Express Framework - Root password in config.json wfuzz FTW! 00:40 - Begin of Recon 02:45 - Checking FTP to get a note 03:38 - Going to each of the three websites 04:30 - Running Gobuster ... Tools: Nmap, Metasploitable, Jenkins, Data Stream, KeePass Abusing Jenkins to get the foothold and Impersonation to get ... 00:00 - Port Scan 00:50 - Web Directory Busting 02:04 - Decoding RSA Key 02:43 - Vulnerability Discovery 03:12 - Leaking ... [ Timestamp Below ] *- - - Thank you so much for 400 subscription :D !! - - -* *- - - I am starting my OSCP journey soon, but I will still ... Mon tipeee : tipeee.com/khaos-farbauti-ibn-oblivion Mon uTip : utip.io/khaosfarbauti HTB Luke ... Active Info Gathering 00:00 - Port Scan 00:30 - Gophish Dashboard Access 01:22 - Mapping DNS Names 01:48 - Subdomain ... I couldn't find any video of someone speedruning this, so, this might be considered as a WR? :^) Reconnaissance 00:00 - Port Scan 00:17 - SMB Enumeration 00:47 - Extracting Embedded Files 01:25 - Viewing Tomcat ...