mirror of
http://git.nowherejezfoltodf4jiyl6r56jnzintap5vyjlia7fkirfsnfizflqd.onion/nihilist/hacking-blogposts.git
synced 2025-05-16 20:37:01 +00:00
fix the hacking tutorials
This commit is contained in:
parent
325b9c3814
commit
673311896a
21 changed files with 207 additions and 489 deletions
|
@ -313,7 +313,7 @@ Seems like we will use the C exploit n°44298. Let's locate it and copy it onto
|
|||
/usr/share/exploitdb/exploits/linux/local/44298.c
|
||||
|
||||
|
||||
Fun Fact : we're going to privesc the exact same way as we did back on the [Bashed](15.html) machine.
|
||||
Fun Fact : we're going to privesc the exact same way as we did back on the [Bashed](15.md) machine.
|
||||
|
||||
|
||||
λ nihilist [ 10.10.14.48/23 ] [ ~/_HTB/Help ]
|
||||
|
|
|
@ -247,7 +247,7 @@ Here we get the /manager/text URI and if we lookup the tomcat documentation, thi
|
|||
|
||||
|
||||
|
||||
So from here, just like for the [Kotarak](../Hard/7.html) box, we can upload a malicious WAR file to get us a shell, we're going to generate it using msfvenom:
|
||||
So from here, just like for the [Kotarak](../Hard/7.md) box, we can upload a malicious WAR file to get us a shell, we're going to generate it using msfvenom:
|
||||
|
||||
|
||||
[ 10.10.14.13/23 ] [ /dev/pts/74 ] [~/HTB/Tabby]
|
||||
|
|
|
@ -189,7 +189,7 @@ Just like we saw earlier, we see that the DC name is **EGOTISTICAL-BANK.LOCAL**
|
|||
|
||||
|
||||
|
||||
Now let's use GetNPusers.py to get the TGT (Ticket Granting Ticket) if the account doesn't need Kerberos pre-authentication, just like we did back on the [Forest](38.html) box.
|
||||
Now let's use GetNPusers.py to get the TGT (Ticket Granting Ticket) if the account doesn't need Kerberos pre-authentication, just like we did back on the [Forest](38.md) box.
|
||||
|
||||
|
||||
[ 10.10.14.13/23 ] [ /dev/pts/3 ] [~/HTB/Sauna]
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue