Sekhmet

insane windows

Hack The Box machine, insane difficulty, with 11 identified techniques.

▶ Full video by IppSec Open on HTB

1. Initial access

  1. Vhost and subdomain fuzzing ▶ watch in the video
  2. Default credentials ▶ watch in the video
  3. Insecure deserialization ▶ watch in the video

2. Lateral movement to user

  1. Backups and archives ▶ watch in the video
  2. Weak or homemade cryptography ▶ watch in the video
  3. Credentials in files ▶ watch in the video
  4. Command injection ▶ watch in the video
  5. Internal services and port forwarding ▶ watch in the video
  6. Password spraying and valid users ▶ watch in the video

3. Privilege escalation to root/SYSTEM

  1. Saved credentials / DPAPI ▶ watch in the video
  2. AppLocker and Constrained Language Mode ▶ watch in the video

Keep practising the same skills

Something missing or wrong on this page? Tell me →