Lawrence Amer’s Post

🎉 Completed Another Machine from Hack The Box! 🎉 🔒 Machine: Flight 📑 Write-Up: "https://lnkd.in/g6fxD5GT" 💡 Key Learnings: -> Active Directory Pentesting #ADPentesting #WindowsExploitation

🔐 Just conquered the "Headless" box on HackTheBox! 💣💻 Gained initial access through a crafty web vulnerability, followed by leveraging another web vulnerability to dive deeper. 🕵️♂️ The final stretch involved an easy-to-spot privilege escalation using a particular file. 🌀💡 This easy and relaxing challenge was perfect for an afternoon hack! 🚀 #HackTheBox #Headless #CyberSecAdventure #InfoSecJourney #EthicalHacking #CaptureTheFlag

Geek Streak 30 Days POTD Challenge - Day 18 Maximize Array Value After Rearrangement Given an array arr of n integers. Your task is to write a program to find the maximum value of ∑arr[i]*i, where i = 0, 1, 2,., n-1. You are allowed to rearrange the elements of the array. Note: Since the output could be large, print the answer modulo 10^9+7. #geekstreak2024 #Datastructures #Arrays

🔍 Recently Discovered: Is Your Container Image Really Distroless? Sharing Eye-Opening Insights That Captivated My Attention A big thank you to Laurent Goderre for sharing their valuable insights on application containers. Containerization has revolutionized the security landscape by granting engineers greater control over application runtime environments. However, ensuring ongoing security posture demands significant time investments due to the ever-evolving threat landscape. But fear not, there's a game-changer on the horizon: "distroless" images. What's a distroless image? It's a lean, mean container image stripped of unnecessary software, slashing maintenance time and reducing vulnerability exposure. But do they truly live up to the hype? Dive into our latest article where we unpack: 1️⃣ What makes an image distroless? 2️⃣ Tools facilitating practical creation. 3️⃣ The verdict: Do distroless images deliver? But wait, why do some 'distroless' images still carry Linux essentials like Bash or BusyBox? The answer lies in container initialization. Discover in our article how init containers in Kubernetes offer a pathway to true distrolessness, separating initialization dependencies from runtime ones. #containers #kubernetes #tech #security

Well then, for a medium level machine this one was actually rather difficult. Standard enumeration to begin with, discovery of a subdomain that leads to a teamcity website. Abuse of a exploit to achieve account takeover. SSH to user flag, post enumeration reveals a 2nd subdomain. And finally what took hours; exploiting docker.

🚀 Milestone Achievement: First Insane Machine Owned on Hack The Box! 🚀 I’m thrilled to share that I have successfully owned my first Insane-rated machine on Hack The Box! 💪 The machine, named Skyfall, was an extremely challenging experience that tested my skills to the limit. Here’s a brief summary of my journey: 1️⃣ Recon: • Conducted a thorough Nmap scan, identifying open SSH (22) and HTTP (80) ports. • Used Gobuster for directory brute force and FFUF for subdomain enumeration, uncovering hidden directories and subdomains. 2️⃣ Exploitation: • Discovered and exploited the CVE-2023-28432 vulnerability in the MinIO storage system to gain sensitive information. • Leveraged the obtained credentials to manage the MinIO container and access further sensitive data. 3️⃣ Pivoting: • Located a Vault API address and token, which allowed me to interact with the Vault system. • Used the Vault to generate a one-time login password and gained SSH access as user "askyy". 4️⃣ Privilege Escalation: • Explored sudo permissions and found a way to run a specific script with root privileges. • Retrieved another Vault token from debug logs and set the role to admin, ultimately gaining root access.

After finding the exploit, tip: Apache-OFBiz-Authentication-Bypass user.txt was quite easy, but to gain root I had a little hard time understanding how to privesc.

Just cracked a seasonal challenge machine! Leveraged the latest CVE in the Apache OFBiz Manager application, cracked initial access, and tackled tricky privilege escalation. Loads of lessons learned! 🚀💻 #CybersecurityAdventure #HackTheBox #InfoSecLearning #CyberAdventure"

A very easy box, but a fun exercise to exploit the infamous SMB hack that allowed WannaCry to storm the world. There are several ways to go about this hack. I spent some time crafting a msfvenom payload and then trying a .py exploit, but I kept getting line errors in unexpected places. At the end of the the day, msfconsole is one heck of an easy tool as a backup. This a great beginner box in my opinion, a great toe in the water for smbclient usage, nmap, msfconsole, and meterpreter.

Flagsmith is an #OpenSource platform allowing customers to release features and manage flags quickly and efficiently over a range of platforms. But when faced with increasing demands for global low-latency replication and customers wanting real-time functionality, things got tricky. Learn how the SSE feature of Fastly's CDN helped Flagsmith unlock practical and powerful real-time flag updates which weren’t prohibitively expensive: https://lnkd.in/er6RdHXQ