This box was downloaded from VulnHub and is also on the TJnull list of practice boxes for OSCP preparation. The box involved the follows: Web Enumeration checking the source-code and static js file MySQL commands to edit the database Exploit the Document Upload vulnerability of SeedDMS to gain initial shell Sudo access for privilege escalation I always start my enumeration from the autorecon scan. Initial Nmap scan results are as below:...

This box was downloaded from VulnHub and is also on the TJnull list of practice boxes for OSCP preparation. The box involved the follows: Web enumeration with gobuster Wordpress exploit to gain initial shell Sudo exploit for privilege escalation I always start my enumeration from the autorecon scan. Initial Nmap scan results are as below: Scanned at 2022-04-20 05:50:19 EDT for 7s Not shown: 998 closed tcp ports (reset) PORT STATE SERVICE REASON VERSION 22/tcp open ssh syn-ack ttl 64 OpenSSH 7....

This box was downloaded from VulnHub and is also on the TJnull list of practice boxes for OSCP preparation. The box involved the following steps: Git repositoru extract Credential extract playing with cryptography Sudo vulnerablity exploited for privilege escalation I always start my exploitation from the autorecon scan. Initial Nmap scan results are as below: Scanned at 2022-04-20 00:17:48 EDT for 9s Not shown: 998 closed tcp ports (reset) PORT STATE SERVICE REASON VERSION 22/tcp open ssh syn-ack ttl 64 OpenSSH 7....

This box was downloaded from VulnHub and is also on the TJnull list of practice boxes for OSCP preparation. The box involved the following steps: SMB Enumeration CMS exploit for RCE SUID binary exploit for Privilege Exploitation I always start my exploitation from the autorecon scan. Initial Nmap scan results are as below: Scanned at 2022-04-19 20:02:11 EDT for 23s Not shown: 996 closed tcp ports (reset) PORT STATE SERVICE REASON VERSION 80/tcp open http syn-ack ttl 64 Apache httpd 2....

This box was downloaded from VulnHub and is also on the TJnull list of practice boxes for OSCP preparation. The box involved the following steps: Enumeration of port 80 Webdirectory bruteforcing SQL Injection exploitation in vulnerable OpenEMR Exploiting the PATH variable on SUID binary for Privilege Escalation I always start my exploitation from the autorecon scan. Initial Nmap scan results are as below: Nmap scan report for 10.0.0.25 Host is up, received arp-response (0....

This box was downloaded from VulnHub and is also on the TJnull list of practice boxes for OSCP preparation. The box involved the following steps: Port 80 Enumeration Wordpress Enumeration and password bruteforce using wpscan Manipulating SQL query to gain initial Reverse Shell Exploiting the cron job for privilege escalation I always start my exploitation from the autorecon scan. Initial Nmap scan results are as below. Scanned at 2022-04-19 01:15:55 EDT for 8s Not shown: 999 closed tcp ports (reset) PORT STATE SERVICE REASON VERSION 80/tcp open http syn-ack ttl 64 Apache httpd 2....

This box was downloaded from VulnHub and is also on the TJnull list of practice boxes for OSCP preparation. The box involved the following steps: Web Enumeration Pop3 bruteforcing and enumeration Moodle spell check path exploit for reverse shell Kernel exploitation for Privilege Exploitation I started with the initial Nmap scan and the result is as below. Scanned at 2022-04-18 21:41:48 EDT for 28s Not shown: 998 closed tcp ports (reset) PORT STATE SERVICE REASON VERSION 25/tcp open smtp syn-ack ttl 64 Postfix smtpd 80/tcp open http syn-ack ttl 64 Apache httpd 2....

This box was downloaded from VulnHub and is also on the TJnull list of practice boxes for OSCP preparation. The box involved the following steps: Enumerating port 80 Exploiting Tiki WIKI CMS Simple Sudo permission for Priv Exploit I always start my exploitation from the autorecon scan. Initial Nmap scan results are as below: Scanned at 2022-04-07 05:17:31 EDT for 23s Not shown: 996 closed tcp ports (reset) PORT STATE SERVICE REASON VERSION 22/tcp open ssh syn-ack ttl 64 OpenSSH 8....

This box is from VulnHub and is in the TJ NuLL list of boxes for OSCP preparation. I am not going into deep details in this write-through, but there is a deep dive through of buffer-overflow here. This box involved the following steps. Web Enumeration BufferOverflow Exploit for RCE less command sudo exploit for Privilege Escalation As always I am going to start with the autorecon scan. The initial Nmap scan result is as below....

This box was downloaded from VulnHub and is also on the TJnull list of practice boxes for OSCP preparation. The box involved the following steps: Enumerating SSH Web Directory Enumeration SQL Injection Linux Kernel Exploitation for Privilege Escalation I started with the initial Nmap scan and can only find one port open and that too ssh. The initial Nmap Scan result is as below. Host is up, received arp-response (0.00040s latency)....