HTB - HORIZONTALL

 Introduction

IP: 10.10.11.105

S.O.: Ubuntu

For today I will show you how to exploit  strapi CMS via a RCE and Laravel also using a RCE

HTB - Granny

 Introduction

IP: 10.10.10.15

S.O: Windows

Today we have a windows machine exposing http port wich supports webdav protocol. We will abuse webdab to upload our malicious webshell and get a reverse shell.

From that we will escalate priviledges exploiting MS09-012 or Token Kidnapping

HTB CRONOS

Introduction

IP: 10.10.10.13

S.O: Linux

We will use a SQLi vulnerabilityto bypass an authentication system

From that point using a RCE we will get a shell in the victim

Then will privilege escalation abusing of a php script execute via cron as root.

HTB - BASTARD

 IP: 10.10.10.9

S.O: Windows

Drupal / SeImpersonatePrivilege

Introduction

We will take advantage of a RCE in drupal to get a reverse shell.

Once in the system, we will escalate priviledge  with SeImpersonatePrivilege