HackTheBox - Traceback
00:00 - Intro
00:45 - Checking the web page, then running a SecList wordlist for CommonBackdoors
03:30 - GoBuster returned smevk.php
04:15 - Attempting to guess the password, get in with admin:admin
05:55 - Running script prior to my reverse shell to log the output... I forget to check this again but it did work!
07:30 - Reading note.txt which hints at finding a LUA File, using find to hunt for files
09:05 - The reverse shell is misbehaving, lets fix it by setting the the rows/columns
12:10 - Running LinPEAS, discover sudo with luvit; then looking up how to write files with a lua script
16:10 - SSH'ing in with SysAdmin after our key was written
18:50 - Using find some more to hunt for interesting files
23:11 - Using find to search between dates of interest shows an interesting backup directory
25:40 - Running pSpy to search for running processes
30:00 - Puzzled... Probably should have ran find commands to look for files edited within the last day!
32:40 - Changing up our tactic and using find commands to search for writable files
34:10 - Editing MOTD with a reverse shell then SSH'ing in
35:50 - Extra: Running linPeas to see if it would have seen this privesc.
37:40 - Looking at the script.log output
On this page of the site you can watch the video online HackTheBox - Traceback with a duration of hours minute second in good quality, which was uploaded by the user IppSec 15 August 2020, share the link with friends and acquaintances, this video has already been watched 30,020 times on youtube and it was liked by 947 viewers. Enjoy your viewing!
