Tartarsauce

medium linux

Hack The Box machine, medium difficulty, with 7 identified techniques.

▶ Full video by IppSec Open on HTB

1. Initial access

  1. CMS exploitation ▶ watch in the video
  2. Public CVE exploitation ▶ watch in the video
  3. Remote file inclusion (RFI) ▶ watch in the video

2. Lateral movement to user

  1. Sudo abuse ▶ watch in the video

3. Privilege escalation to root/SYSTEM

  1. Cron jobs and processes ▶ watch in the video
  2. SUID binaries ▶ watch in the video
  3. Symlink abuse ▶ watch in the video

Keep practising the same skills

Something missing or wrong on this page? Tell me →