Trickster

medium linux

Hack The Box machine, medium difficulty, with 13 identified techniques.

▶ Full video by IppSec Open on HTB

1. Initial access

  1. Vhost and subdomain fuzzing ▶ watch in the video
  2. Directory brute forcing ▶ watch in the video
  3. Exposed .git repository ▶ watch in the video
  4. Cross-Site Scripting (XSS) ▶ watch in the video
  5. CSRF ▶ watch in the video
  6. Public CVE exploitation ▶ watch in the video

2. Lateral movement to user

  1. Credentials in files ▶ watch in the video
  2. Hash cracking ▶ watch in the video
  3. Internal services and port forwarding ▶ watch in the video
  4. Container escape ▶ watch in the video
  5. Server-Side Template Injection ▶ watch in the video
  6. Backups and archives ▶ watch in the video

3. Privilege escalation to root/SYSTEM

  1. Sudo abuse ▶ watch in the video

Keep practising the same skills

Something missing or wrong on this page? Tell me →