▶️ YouTube: https://www.youtube.com/c/PinkDraconian
🎁 Patreon: https://www.patreon.com/PinkDraconian
🐦 Twitter: https://twitter.com/PinkDraconian
🎵 TikTok: https://www.tiktok.com/@pinkdraconian
ℹ️ LinkedIn: https://www.linkedin.com/in/robbe-van-roey-365666195/
📞 Discord: PinkDraconian#9907
📷 Instagram: https://www.instagram.com/robbevanroey/
🕸️ Website: http://pinkdraconian.d4rkc0de.com/
👨💻 HackTheBox: https://www.hackthebox.eu/home/users/profile/129531
🤖 Reddit: https://www.reddit.com/user/PinkDraconian
☁️ Steam: https://steamcommunity.com/id/PinkDraconian
🐈 GitHub: https://github.com/PinkDraconian
00:00 Introduction
01:10 Looking at port 5000
02:00 Directory & file fuzzing
03:20 Identifying and exploiting XSS
09:40 Accessing the admin dashboard
10:30 Exploiting an OS Command Injection
14:00 Escalating privileges using sudo -l and relative path command execution as root
