A not so easy rated machine from Hack the Box.
Join the community for all things Hack the Box
https://discord.gg/hackthebox
#PHP #CMS Exploit #SQLi #CVE #SUID #SQL #RCE
References:
SNMP walk - Ihttps://www.comparitech.com/net-admin/snmpwalk-examples-windows-linux/
SNMP Community String - https://www.dnsstuff.com/snmp-community-string
Auto recon - https://github.com/Tib3rius/AutoRecon
CVE 2021 32099 - https://cyber.vumetric.com/vulns/CVE-2021-32099/sql-injection-vulnerability-in-artica-pandora-fms-742/
Path Injection - https://www.hackingarticles.in/linux-privilege-escalation-using-path-variable/
SUID - https://www.tecmint.com/how-to-find-files-with-suid-and-sgid-permissions-in-linux/
Music:- ASHUTOSH - Chile
Watch:- https://youtu.be/fnOW-AdFY6I
https://www.ashutoshmusic.com/music