Скачать или смотреть Forwardslash - HackTheBox

First Hackthebox writeup uploaded... The Forwardslash is a hard linux machine on HTB.

FOOTHOLD: We get to brute-force the subdomains, see a backup subdomain of the previously hacked machine with it's API still working and having LFI along with php filters! With exposed credentials in a FTP-login based page...
USER: Using SSH, we find a SETUID custom-made binary which reads files based on MD5SUM of current timestamp and can be manipulated to read the old configuration files containing another credential.
ROOT: Brute-forcing the key to a cipher algorithm gives a key for decrypting a backup which can be mounted and accessed due to granted sudo permissions for the user. The backup contains RSA private key for root which can be used to SSH in as root!


--My errors--
Explained some of the workings more times than required...
Different/stuttering of voice a number of times.
Should have increased fonts at times....
And still counting...(comment if you didn't like something)
-------------------


And remember, this is a solution not an explanation.