Sifting bit by bit

I feel wonderful after solving this box with some hints from a good friend ( MinhTrietPT ) because my method is difference than in the official write-up from Hack The Box . I have to say that I was stuck with this box for 2 weeks. Yeah, now you you know how I'm feeling. As someone say: "enjoy the journey, not the destination." This is very true for me. So. let's get started! First, we use nmap to scan the target: I felt that I need to dig deeper into the port 3632, keep using nmap: Hmm, we have CVE-2004-2687. After googling, we should know which exploit we can use: Wow, we have the shell, but...but... with the daemon user, we cannot read the flag files. We have to learn about Linux Privilege Escalation here. Using this command for enumeration: " find / -perm -g=s -o -perm -4000 ! -type l -maxdepth 3 -exec ls -ld {} \; 2>/dev/null ", what we can find:  Do you see nmap? Do you see what permission of nmap? Let use this co...

I would like to start the monthly review to keep track my journey into Cybersecurity and Pentesting. I think the most important things I have done last month (July 2018) were start practicing on Hack The Box and join the local Pwn School meetup. I have some things which I like and dislike about Hack The Box. At the beginning, I chose Hack The Box over Vulnhub was Hack The Box lists all of its labs/machines along with their difficulty level. That help me a lot as a beginner in Pentesting and I decided to hack all of its Easy labs first. I already finished Legacy and Blue, and stuck at Lame because I can't escalate my privilege from daemon user to root user. Now, I'm reading about Linux Escalation to overcome this obstacle. I also read the write-up and realized they used another vulnerability to hack this box. But, I want to learn and challenge myself so now I'm stopping at Lame. However, Hack The Box's lab not always available. So, I'm thinking about switching to...

Hi friends, Yesterday, I hacked successfully the box Blue on Hack The Box site. This box is quite easy if you have the experience and feeling from the previous box: Legacy. We almost use the same technique from Legacy to compromise this Blue box. Let's get started: First, we use nmap to scan for the open ports on that box: " nmap -T4 -p 1-65535 -A -sV 10.10.10.40 ". Do you see the port 445 is open? Then keep using nmap to check if there is any vulnerability on that port: " nmap --script vuln -p445 10.10.10.40 " And, we will find that the box is vulnerable with MS17-010 bug. Now, we can use Metasploit to compromise it. After using Metasploit, we will have the shell and can find the flags on the Desktop folder of user Administrator and haris. If you want to go beyond the duty, you can do some forensics on that remote PC: Happy hacking, my friends!

Hi friends, I've just finished the Legacy box on Hack The Box, and it's retired so I would like to write down my solution. First, I have to say that I'm totally new in pentesting or CTF playing. That's why I did take a look on Hack The Box labs to find the most easiest boxes to start with, and I found 4 boxes: Legacy, Blue, Lame and Jerry. I just picked Legacy box randomly and started with nmap scanning: " nmap -p 1-63335 -T4 -A -v 10.10.10.4 " and found that we had 3 ports opening: 139, 445, 3389 . Then, I kept using nmap to check for if these is any vulnerabilities on port 445: " nmap --script vuln -p445 10.10.10.4 " and got the MS08-067 (CVE-2008-4250)  vulnerability. Now, I could use Metasploit to exploit for the above bug: " use  exploit/windows/smb/ms08_067_netapi ". You might need to set rhost option before running the exploit. After that, we will have the shell and we could find the needed flags on the Desktop fo...