HackTheBox - Scanned - Escaping and Exploiting Chroot Based Jails via Unprotected File Descriptor
00:00 - Intro
01:00 - Start of nmap
02:00 - Using MSFVenom to upload a reverse shell to identify what the malware sandbox looks like
04:25 - Examining the source code of the sandbox
12:00 - Creating a program in C to see the size of an unsigned long
13:40 - Creating a program to replace the output of the trace program and exfil data via the return register on the webapp
20:50 - Creating a python program to automate uploading the file and returning the output
27:05 - Creating a program in C to perform ls, so we can enumerate the jail
34:00 - Changing our ls to enumerate /proc
36:25 - Adding a readlink() call to our ls program so we can view symlinks
41:00 - Discovering an open file descriptor in PID 1, using this to escape the jail and read /etc/passwd
44:40 - Dumping the Django Database
46:00 - Using hashcat to crack a custom salted MD5 hash/password
51:00 - Examining how the sandbox is created on the box itself, explaining how we can abuse setuid binaries because we can
13 views
191
41
6 months ago 00:33:44 1
Best Hacking Laptop 2023
6 months ago 00:27:16 1
Top Hacking Books for 2023
6 months ago 02:00:43 1
hack the box
6 months ago 00:20:43 1
Расследую инцидент взлома | #HackTheBox | КАК ПРОЙТИ #
6 months ago 00:36:09 1
Прохождение #Linux-машины , сложного уровня | #HackTheBox | КАК ПРОЙТИ #
6 months ago 00:30:39 1
Прохождение Linux-машины средней сложности SANDWORM HackTheBox | КАК ПРОЙТИ
7 months ago 00:13:24 1
Прохождение задания UNDER CONSTRUCTION на Google CTF 2023 | КАК ПРОЙТИ UNDER CONSTRUCTION GOOGLE CTF
7 months ago 11:21:04 1
Bug Bounty Course 2024 Updated
7 months ago 07:22:03 1
Ultimate Guide to Ethical Hacking with Kali Linux #ethicalhacking #hacker
7 months ago 00:41:25 4
HackTheBox - Visual
8 months ago 05:30:24 3
George Hotz | Programming | Hack The Box | ctf practice for skill (should tomcr00se return?)
9 months ago 01:02:06 14
HackTheBox Zipping
9 months ago 00:16:21 18
HackTheBox - Sau
9 months ago 02:09:39 12
HackTheBox - Coder
9 months ago 00:15:02 1
Решение машины #topology на #hackthebox
9 months ago 00:13:41 1
Решение машины #cozyhosting на #hackthebox
10 months ago 00:46:30 1
Tier 0: HackTheBox Starting Point - 5 Machines - Full Walkthrough (for beginners)