HackTheBox - Meta

A medium rated machine from Hack the Box. Join the community for all things Hack the Box https://discord.gg/hackthebox #python #CVE #sudo #exploitation #subdomain #domain #exiftool #ssh #pspy #imagemagick Chapters: 0:00 - Intro 00:17 - Quick overview 01:32 - Enumeration 12:16 - CVE review and foothold 23:12 - Privilege escalation to user 41:39 - Pivot to Root References: Image magick - https://imagemagick.org/script/mogrify.php CVE - https://www.rapid7.com/db/vulnerabilities/redhat_linux-cve-2020-29599/ CVE - https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-29599 CVE- https://www.tenable.com/cve/CVE-2020-29599 Exiftool exploit - https://github.com/barrracud4/image-upload-exploits Neofetch - https://linuxhint.com/what-is-neofetch-for-linux/ Neofetch config -https://github.com/dylanaraps/neofetch/wiki/Customizing-Info#config-file-location Music:- ASHUTOSH - Chile Watch:- https://youtu.be/fnOW-AdFY6I https://www.ashutoshmusic.com/music