Solving FristiLeaks 1.3 (Vulnhub) Walkthrough

Be better than yesterday

Penetration Tester by trade
OSCE|OSCP|CREST

This video shows how to solve the vulnerable machine FristiLeaks: 1.3

FristiLeaks: 1.3 is a recommended vulnerable machine hosted on Vulnhub for Offensive Security OSCP preparation

FristiLeaks: 1.3 vulnerable machine can be downloaded from https://www.vulnhub.com/entry/fristil...

Gemini Security Awesome Hacking T-Shirts - Support the channel:
https://www.redbubble.com/people/Gemi...

Key Concepts:
Enumerating software versions with NMap and Burp Suite
Hidden Comments in HTML
Base64 and Rot13 Encoding
PHP Reverse Shell File Upload
Reversing Encoded Strings with Python2
Linux Enumeration
Linux Privilege Escalation

Timestamp
00:00 Intro
00:11 Enumeration to Initial Foothold
12:31 Initial Foothold via PHP Reverse Shell Obtained
13:54 Attempt Privilege Escalation
14:24 Privilege Escalation 1 - Priv Esc to Jerry
19:53 Privilege Escalation 2 - Priv Esc to fristigod
25:00 Privilege Escalation 3 - Priv Esc to root