#vulnhub

Articles tagged with #vulnhub

[Offensive Security] Proving Grounds - Tre
Just another BigTree MANTIS Credentials Leak & Pre-Auth Password Reset / Startup root pspy / root2 passwd & shadow Patch Hijack Write-up. CTF Link (VulnLab). Goal: Get the root shell i.e.(root@localhost:~#) and then obtain flag under /root). CTF Lin...
Jul 14, 20228 min read759
[Offensive Security] Proving Grounds - HAWordy
Just another wpscan WebShell RCE / cp SUID Privesc Write-up. CTF Link (VulnLab). Wordy is design for beginners to experience real life Penetration testing. This lab is completely dedicated to Web application testing and there are several vulnerabili...
Jul 14, 20225 min read327
[VulnHub] Web Machine: (N7)
Just another fping / Extension'ed Gobuster & Param Miner / Shameful VulnLab Cheat / Cookie Hash Leak / sqlmap Time-Based Blind SQLi Write-up. CTF Link. Difficulty: Medium Using VirtualBox, we first make sure the kali and the target machine both have...
Jul 11, 20227 min read3.1K
[Offensive Security] Proving Grounds - SoSimple
Just another wpscan Unauthenticated RCE / RSA Key Leak / service SUDO -L'ed / writable sh script SUDO-L'ed Write-up. CTF Link (VulnLab). This is an easy level VM with some rabbitholes. Enumeration is key to find your way in. There are three flags (2...
Jun 16, 20227 min read662
[Offensive Security] Proving Grounds - NoName
Just another HTML Password Leak / Steghide / Ping Obfuscated-RCE'ed / LinPEAS'ed find SUID Write-up. CTF Link (VulnLab). This a beginner level machine , getting a shell is a little bit harder, just think out of the box to get the shell.privilege esc...
May 4, 20227 min read895
[VulnHub] Jangow: 1.0.1
Just another PHP RCE / Kernel CVE Write-up CTF Link. Footprinting Open ports I looked for open ports using Nmap: kali@kali:~$ mkdir nmap kali@kali:~$ sudo nmap -v3 -O -sS -p- -Pn -oA nmap/syn_full 192.168.56.118 Scanning 192.168.56.118 [65535 ports...
Feb 22, 20224 min read2.1K

#vulnhub - jamarir's blog