00:00 - Introduction
00:40 - Start of nmap
03:30 - UDP Nmap finished, running ike-scan in aggressive mode
05:00 - Cracking the ike hash with hashcat and then SSH into the box
06:10 - Showing TFTP was open which has a cisco config, showing MSF and NMAP to enumerate the TFTP Service
10:55 - Running LinPeas to show us the outdated sudo
12:00 - Exploiting CVE-2025-32463, the CHROOT Sudo Exploit
14:30 - Exploiting the other one, CVE-2025-32462, which requires finding a hostname on the box