We are back again.
This is a small update as I’m currently in the process of working through the Hackthebox CREST CRT Track and the list of boxes which are in said track.
Progress shown below –
In Progress – NFS/ Shares / Mounting dentifying and leveraging misconfigurations in NFS shares through impersonating users. Additionally, the box incorporates the enumeration of an X11 display into the privilege escalation, screenshot X11.
In Progress – Umbraco CMS installation. Credentials are found in a world-readable NFS share. Using these, an authenticated Umbraco CMS exploit is leveraged to gain a foothold. A vulnerable TeamViewer version is identified, from which we can gain a password.
Also I have a few credits left over from HTB Academy so today as these boxes have pissed me off, I’m going to run through the Web Fuzzing Module on Academy as a little break from the boxes!
And remember
Arrivederci!