Directory Traversa vulnerability ctf : HACKTHEBOX OPENSOURCE CTF WALKTHROUGH

Описание к видео Directory Traversa vulnerability ctf : HACKTHEBOX OPENSOURCE CTF WALKTHROUGH

OpenSource from hackthebox, we learn web app enumeration, and find credentials and source code in downloadable source zip. We exploit a directory traversal vulnerability to obtain a shell via Flask app, debug pin calculation (failed) and source file overwriting. Accessing a private Gitea instance reveals an SSH key for host access. Exploiting a root-running cron job with Git hooks grants root shell access.

Subscribe for more!

***This is for educational purposes only***, Youtube bot, this is a ctf :)

Комментарии

Информация по комментариям в разработке