HackTheBox - Servmon Box Writeup

For those who are starting in the cyber security area, the Hack The Box is an online platform that allows you to test your penetration testing skills and you can exchange ideas in the hacking community with thousands of people in the security field.

The platform has a bunch of machines(active and retired) to hack, as also machines to test forensics skills, and when you feel real comfortable you can go for the challenges, pretty awesome.

In this eighteenth episode, it will guide you step by step in order to hack the Servmon box, This box is an easy-level machine, to get user, this machine requires a little bit of patience to get the initial user credentials, we managed to grab some users from the ftp, and then we follow the track of the paswwords.txt file, and finally we got ssh credentials for nadine. To privesc this machine we exploited the NSClient++ application, creating a scrip and running it on the server, getting a reverse shell to own the machine.
Globally this machine was so much fun and is very good to apply new techniques, mostly on privesc to get root. Watch and enjoy, and if you have any comments or suggestions, leave a comment down below.

Have fun...

DISCORD CHANNEL (under construction) - https://discord.gg/wrUmQF

💸Donate💸
Like the channel? Please consider supporting me on Patreon:
https://www.patreon.com/dEfCoNnUlL
https://paypal.com/[email protected]


HACK THE BOX - HACKING SERIES

#1 Hack the Invitation Code - https://www.youtube.com/watch?v=hnlJv...
#2 Hack The Box - Getting Started - https://youtu.be/qm7ggKgy3w8
#3 Hack The Box - Hacking Lame Box - https://youtu.be/csDKuQN6Oi0
#4 Hack The Box - Hacking Legacy Box - https://youtu.be/iokOnrBoEMA
#5 Hack The Box - Hacking Devel Box - https://youtu.be/GbQ94prMJgc
#6 Hack The Box - Hacking Beep Box - https://youtu.be/y7nXjq1SzaA
#7 Hack The Box - Hacking Optimum Box - https://youtu.be/T27YhEqIXp8
#8 Hack The Box - Hacking Artic Box - https://youtu.be/yNwD6nkaGgE
#9 Hack The Box - Hacking Grandpa Box - https://youtu.be/BluBOU1YWsE
#10 Hack The Box - Hacking Granny Box - https://youtu.be/vnauVbKubJI
#11 Hack The Box - Hacking Blocky Box - https://youtu.be/eRW5iBb-xSk
#12 Hack The Box - Hacking Mango Box - https://youtu.be/1Q1ARbeNd_w
#13 Hack The Box - Hacking Bank Box - https://youtu.be/XQqIllY1H-Q
#14 Hack The Box - Hacking Blue Box - https://youtu.be/AmRhNTRpnBA
#15 Hack The Box - Hacking Monteverde Box - https://youtu.be/wAb6ROrktzI
#16 Hack The Box - Hacking Nibbles Box - https://youtu.be/aVj-GAzW2NY
#17 Hack The Box - Hacking Sauna Box - https://youtu.be/91lzpyXYNLY

------------------------------------------------------------------------------------

HACK THE BOX - CHALLENGE SERIES

#1 Hack The Box - Reverse Engineering Snake Challenge - https://youtu.be/Tnua7ZZeUv4

------------------------------------------------------------------------------------

MY HACK THE BOX HACK NOTES
https://github.com/smasher35/hacktheb...

-------------------------------------------------------------------------------------

USEFUL LINKS:

HACK THE BOX
https://www.hackthebox.eu

DECODERS:
https://cryptii.com
https://www.base64decode.org

EXPLOITS INFO:
https://www.exploit-db.com
https://opendata.rapid7.com/

------------------------------------------------------------------------------------

TOOLS AND EXPLOITS:

NMAP
https://nmap.org

ZENMAP
https://nmap.org/zenmap/

METASPLOIT
https://www.metasploit.com

SSH
https://www.ssh.com/ssh/

SSH PORTFORWARDING
https://www.ssh.com/ssh/tunneling/example

NSCLIENT++ EXPLOIT
https://www.exploit-db.com/exploits/46802


----------------------------------------------------------------------------------

HACKER BOOKS

Penetration Testing - A Hands-On Introduction to Hacking: https://amzn.to/31GN7iX
The Hacker Playbook 3 - https://amzn.to/34XkIY2
Hacking: The Art of Exploitation - https://amzn.to/2VchDyL
The Web Application Hacker's Handbook - https://amzn.to/30Fj21S
Real-World Bug Hunting: A Field Guide to Web Hacking - https://amzn.to/2V9srOe
Social Engineering: The Science of Human Hacking - https://amzn.to/31HAmVx
Linux Basics for Hackers - https://amzn.to/34WvcXP
Python Crash Course, 2nd Edition - https://amzn.to/30gINu0
Violent Python - https://amzn.to/2QoGoJn
Black Hat Python - https://amzn.to/2V9GpQk

ETHICAL HACKING COURSES
https://www.udemy.com/course/practica...
https://www.udemy.com/course/windows-...
https://www.udemy.com/course/linux-pr...

---------------------------------------------------------------

📱 FOLLOW ME: 📱

FACEBOOK: https://www.facebook.com/paulo.penich...
TWITTER: https://twitter.com/smasher39?lang=pt_pt
INSTAGRAM: https://www.instagram.com/smasher40/?...
500PX.com: https://500px.com/paulopenicheiro