HackTheBox - Bank

00:39 - Nmap Results 01:15 - DNS Enumeration 04:08 - HTTP VirtualHost Routing 05:28 - DirSearch (Web Enumeration) 08:50 - HTTP Redirect Vulnerability 13:23 - PW in Balance-Transfer 18:00 - File Upload, WebShell 21:48 - First Shell 30:10 - First Privesc Method (SUID) 31:38 - Second Privesc Method (passwd)