🔍 Hacking BlackPearl VM | Step-by-Step Guide to Exploiting a Vulnerable Virtual Machine

Welcome to SanskyTech! In this in-depth tutorial, we walk you through the complete process of hacking the BlackPearl virtual machine using VirtualBox. Whether you're a cybersecurity enthusiast or an aspiring ethical hacker, this video will provide you with valuable insights into penetration testing methodologies.

What You'll Learn:

1-IP Discovery: We begin by identifying the target machine's IP address within our network, setting the stage for the attack.

2-Nmap Scanning: Using the powerful Nmap tool, we perform a thorough scan to detect open ports and services, with a focus on ports 80 and 53.

3-Enumeration & Information Gathering: Dive deep into the open ports to gather critical information about the running services, using tools like DNSRecon to analyze the DNS service.

4-Exploiting Navigate CMS: Discover how to exploit the Navigate CMS platform using a Metasploit module, leading to an initial foothold with a Meterpreter shell.

5-Shell Expansion: Learn how to expand the Meterpreter shell using Python's PTY module, enhancing our control over the target system.

6-Privilege Escalation with LinPEAS: We’ll run LinPEAS.sh to uncover potential privilege escalation paths, crucial for advancing our attack.

7-Gaining Root Access: Finally, we exploit a SUID vulnerability, escalating our privileges to root and successfully hacking the box.

This tutorial is designed to be both educational and practical, providing step-by-step guidance so you can follow along and apply these techniques in your own testing environment. By the end of this video, you'll have a deeper understanding of the tools and techniques used in real-world penetration testing.
For more details, check out the full blog post on our website https://sanskytech.com/en/posts/hacki...

Timecodes
0:00 - intro
0:36 - IP Identification
1:37 - Scanning Ports via Nmap
3:50 - Exploiting Port 80
5:50 - Dirbusting via ffuf
8:16 - Exploiting Port 53
10:29 - DNS Zone Transfer Vulnerability
11:50 - /etc/hosts File
15:48 - Navigate CMS Exploit
16:34 - Navigate CMS Exploitation via Matasploit
18:18 - Shell Development via PTY
20:28 - Priviledge Escalation via Linpeas.sh
24:23 - SUID
27:00 - GTFObins Website


Don't forget to like, subscribe, and hit the bell icon to stay updated with our latest cybersecurity tutorials and tech insights!

📺 YouTube Channel:    / @sanskytech  
🌐 Website: sanskytech.com
📸 Instagram: instagram.com/sansky_tech