Writeup Hackthebox

Summary

01:04 - Start of recon identifying a debian box based upon banners 02:30 - Taking a look at the website, has warnings about DOS ... Initial Foothold : Exploit CMS Made Simple web application via SQL Injection Exploit to get user credentials and login via SSH. Tool used are Nmap, Burpsuite, Ffuf, on kali 2022. Please let me know in the comments below if you learned anything new, and ... 00:00 - Into 00:49 - Start of nmap 06:10 - Discovering admin login page, running SQLMap and discovering it is SQL Injectable ... to the Cyber Mindset Digest to help you think differently about cybersecurity: KyserClark.com/Newsletter ... In this video I will exploit Paper In this video, I will exploit the Timelapse machine which is based on a Windows machine. 00:00 - Intro 00:18 - Start of nmap, scanning all ports with min-rate 02:35 - Browsing to the web page and taking a trip down ... USEFUL LINKS ---------------------- cmd made simple exploit: exploit-db.com/exploits/46635 pspy: ... 00:00 - Port Scan 00:17 - Checking Out robots.txt 00:38 - Vulnerable CMS Discovery 01:00 - Retrieving Potential Password 02:07 ...