Writeup Hackthebox Soqui

Summary

01:04 - Start of recon identifying a debian box based upon banners 02:30 - Taking a look at the website, has warnings about DOS ... Maquina que utilizamos kerbrute para enumerar y conseguir usuarios que nos metiso por un silver ticket a la mssql y nos ... Initial Foothold : Exploit CMS Made Simple web application via SQL Injection Exploit to get user credentials and login via SSH. Join me as we explore Active, an easy yet insightful box from 00:00 - Port Scan 00:17 - Checking Out robots.txt 00:38 - Vulnerable CMS Discovery 01:00 - Retrieving Potential Password 02:07 ... We are solving Proper, a 40-point Windows machine on Think FTP is outdated? Hackers still use it to sneak data out of networks—quietly and effectively. In this beginner-friendly ... For those who are starting in the cyber security area, the HTB is an online platform that allows you to test your penetration testing ... Let's replay the questions the HTB team and friends tackled in our last Cube Talks! GRAB YOUR BEVERAGE OF CHOICE, ... 00:00 - Intro 00:40 - Start of nmap 02:00 - Examining the website, playing with the basket, trying SSTI/SQL Injection special ... USEFUL LINKS ---------------------- cmd made simple exploit: exploit-db.com/exploits/46635 pspy: ... Quick TL;DR — this is a short, no-fluff walkthrough of HTB — Active aimed at OSCP prep. I've pre-rooted the box so you can take ...