overPASS tryhackme writeup

Let's gain access to a Linux machine and escalate privileges via this TryHackMe room Overpass. Using rustscan, let's find some open ports and discover an admin login page. After cracking the login credentials, let's then escalate privileges by creating a bash shell script using sudo. We can execute the script with root privileges, giving access to the root flag. So what are we waiting for? Let's tackle TryHackMe's Overpass!

FREE $5 TryHackMe Credit - https://go.mrash.co/tryhackme

#TryHackMe • #Overpass • #CTF

- - -

Notes - https://mrash.co/hacknotes
Room - https://tryhackme.com/room/overpass
Website, Blog, Newsletter & More - https://go.mrash.co/links
Music - https://go.mrash.co/music

- - -

00:00 - Intro
00:18 - Start Here
00:41 - Exploring Port 80 (http)
01:49 - Directory Fuzzing (feroxbuster)
02:42 - Login.php vuln
03:40 - Bruteforcing an RSA Private Key
05:33 - We're In via SSH
05:45 - Finding User's Password
07:21 - Hidden Password File
08:29 - PrivEsc via Crontab
10:34 - Outro

- - -

Recommended Software

$60 off Speechify Premium - https://go.mrash.co/speechify
Brain Music $1 Pro - https://go.mrash.co/brain.fm
Managed Web Hosting 20% Off - https://go.mrash.co/cloudways
Cheap Domain Names - https://go.mrash.co/namecheap
Automated Email Marketing - https://go.mrash.co/gist
Blog Autopilot - https://go.mrash.co/lettr
Screenshot & Record Everything - https://go.mrash.co/cloudapp
Google's Pro Suite - https://go.mrash.co/googlework

- - -

My Hardware

Asus Z690M+ MoBo - https://go.mrash.co/Z690M
Cooler Master CPU Cooler - https://go.mrash.co/ML120L
Corsair 2TB M.2 SSD - https://go.mrash.co/MP600
Corsair DDR4 32GB RAM - https://go.mrash.co/CMK32GX
Gigabyte 850W PSU - https://go.mrash.co/GP-AP850GM
Intel i7 12700K CPU - https://go.mrash.co/12700K
Intel WiFi 6 AX210 - https://go.mrash.co/AX210
MSI RTX 3070 Ti - https://go.mrash.co/3070Ti
SilverStone Case Fans - https://go.mrash.co/AB120R

Razer Blade i7 Laptop - https://go.mrash.co/RAZRLP2021
Samsung Tab S6 Lite - https://go.mrash.co/s6lite

PRISM+ 34" QLED - https://go.mrash.co/XQ340PRO
Samsung 34" QLED - https://go.mrash.co/3KUWQHD

Bose QC35 II Headphones - https://go.mrash.co/qc35ii
Corsair Harpoon Mouse - https://go.mrash.co/harpoon
Cooler Master Keyboard - https://go.mrash.co/SK622

Mic Arm - https://go.mrash.co/nmicarm

- - -

tryhackme ethicalhacking cybersecurity cybersec hacking informationsecurity pentesting ethicalhacking cybersecuritytraining learnhacking tryhackmecommunity tryhackmerooms cyberwarriors cyberattack cyberdefense cyberthreats cybercrime cyberawareness cyberhygiene cybersavvy cybereducation cyberskills linuxcommunity linuxusers linuxenthusiasts linuxmastery cyberninjas ninjaskills linuxsecrets hiddenfiles shellscripting capturetheflag adventofcyber attacksurfacereduction securityposture networksecurity cybersecurityprofessional phishing dosattacks vulnerabilityexploitation firewall intrusiondetection patchmanagement cyberdefence cyberresilience cybercrime informationsecurity cyberthreats cyberattack cyberprotect

- - -

Subs: 1,263
Hours: 2

- - -

All of my opinions in this video are my own, I was not paid to make this video. Whenever there is a link in any of my videos, if there is an affiliate program available, it's safe to assume that you are clicking on an affiliate link. Please check my website for any associated bonus I may be offering, for supporting me or ask in the comments below.