HackMyVM - Texte

*any action done in the video is only for educational purpose only*

0:00 - Intro
0:07 - Running netdiscover to get IP address
0:18 - Start of nmap to find open ports
0:38 - Running gobuster & seeing if there a directory where uploaded files are stored
1:05 - Uploading & testing if we can bypass the upload for PHP extensions
3:32 - Uploading a JPEG image, but the image is too large
4:20 - Uploading a smaller JPEG image to upload
5:01 - Testing for command injection & executing commands
5:27 - Explaining why we can't run multiple commands, so we use "chaining commands" (It seems like we can only cat files under /var/www/html)
5:59 - Viewing payload all the things for examples on chaining commands
6:41 - Viewing the contents of file and getting SSH user/password
7:04 - Trying the creds found for SSH
7:26 - Getting a log in successful as kamila
7:40 - Doing manual enumeration and finding SUID running as root
7:53 -The SUID is running the mail command, so we confirm that it indeed is
8:35 - Viewing documentation to see how we can execute commands
9:56 - Creating a .mailrc file
10:11 - Using "!" to run id, /bin/bash & create SUID
10:46 - Using our SUID to get root
10:58 - Running a simple /bin/bash just to get a shell as root
11:15 - Catting our root.txt