/ tags/ Linux
Linux Easy machine - **CozyHosting**.
HTB RCE ⓘ Remote Code Execution — the ability to run arbitrary commands on a target system remotely. Linux Sudo ⓘ Linux command for running as another user — misconfigured sudo rules are a common privilege escalation path. SSH ⓘ Secure Shell — encrypted remote login, targeted via key theft, brute force, or misconfigured access. PostgreSQL Linux Medium machine - Cypher.
HTB Linux Sudo ⓘ Linux command for running as another user — misconfigured sudo rules are a common privilege escalation path. SSH ⓘ Secure Shell — encrypted remote login, targeted via key theft, brute force, or misconfigured access. Nmap ⓘ A network scanner used to enumerate open ports, services, and versions on a target. PHP Brute Force ⓘ Systematically trying many credential combinations until one succeeds. Linux Easy machine - Codify.
HTB Linux Sudo ⓘ Linux command for running as another user — misconfigured sudo rules are a common privilege escalation path. SSH ⓘ Secure Shell — encrypted remote login, targeted via key theft, brute force, or misconfigured access. Nmap ⓘ A network scanner used to enumerate open ports, services, and versions on a target. MySQL Wildcard Injection ⓘ Abusing shell wildcard expansion (e.g. tar's '--checkpoint-action') to smuggle arguments into a privileged command. Unknown Unknown machine - Code.
HTB Active Directory ⓘ Microsoft's directory service for managing users, computers, and permissions across a Windows domain. Linux Sudo ⓘ Linux command for running as another user — misconfigured sudo rules are a common privilege escalation path. SSH ⓘ Secure Shell — encrypted remote login, targeted via key theft, brute force, or misconfigured access. Nmap ⓘ A network scanner used to enumerate open ports, services, and versions on a target. Brute Force ⓘ Systematically trying many credential combinations until one succeeds. Path Traversal ⓘ Using '../' sequences to escape a web app's intended directory and read arbitrary files. Linux Easy machine - Cap.
HTB Linux SSH ⓘ Secure Shell — encrypted remote login, targeted via key theft, brute force, or misconfigured access. FTP ⓘ File Transfer Protocol — frequently misconfigured with anonymous access, exposing sensitive files. Linux Capabilities ⓘ Granular Linux permissions; misassigned capabilities (e.g. cap_setuid) can lead to privilege escalation. Linux Medium machine - Builder.
HTB Linux SSH ⓘ Secure Shell — encrypted remote login, targeted via key theft, brute force, or misconfigured access. LFI ⓘ Local File Inclusion — a web vulnerability letting an attacker read arbitrary files on the server. Jenkins