Hacking Access [Proving-Grounds Walkthrough]

We're back from the OSCP, with another ProvingGrounds box called Access. We're done with the CPTS course, so now its time to hack a lot! Practice makes perfect so from now on, we'll be doing a lot of that!

This is another one of the Boxes recommended by TJnull, to pwn in preparation for Pen-200(2023) otherwise known as the OSCP examination.(Offensive Security Certified Penetration Tester)

You can find the document here:

https://docs.google.com/spreadsheets/...


link to Proving Grounds:
https://portal.offsec.com/labs/practice


I hope you enjoy!

Any support helps, if you enjoyed this video, or got something useful from it. Consider liking, commenting and subscribing! It is greatly appreciated


If you too want to learn how to do offensive or defensive security. Then make sure to check out the HackTheBox Academy. I have yet to see a better learning resource, to thoroughly learn the ins and outs of Pentesting as well as Blue Teaming.

==================================================

00:00 Introduction
00:06 Reflecting on the OSCP exam
02:30 Recon
10:08 Enumeration - DNS
12:54 Enumeration - HTTP
16:09 Brute-forcing directories with DIrsearch
20:33 Testing File Upload normal Functionality
25:05 Testing for files other than images
29:11 Fuzzing allowed extensions
32:12 Looking for an extension block bypass
35:43 Bypass via .htaccess
37:34 Confirming code execution
40:49 Uploading a webshell
42:39 Getting a reverse shell
44:27 Enumeration as svc_apache
46:22 Enumerating Kerberos
50:42 Kerberoasting using Powerview
59:35 Cracking Hashes with Hashcat
1:04:16 Verifying Cracked Credentials
1:05:59 Lateral Movement
1:09:40 Enumeration as svc_mssql
1:15:52 SeManageVolumePrivilege
1:17:53 Privilege Escalation from svc_mssql
1:24:46 NT Authority\System
1:28:41 Recap

==================================================



Music:
Night Time Cruise 🌌 lofi hiphop & instrumental mix
Vanilla- Summer

Link:
   • Night Time Cruise 🌌 lofi hiphop & ins...  
   / @chillhopmusic  
   • Vanilla - Summer