Marco Saraiva’s Post

Another machine from HackTheBox. This time bysness. This machine had a web application with a pre-auth RCE vulnerability. After some research, I managed to find an exploit that allowed me to execute a reverse-shell payload and thus gain access to the machine. Once on the machine, I was able to enumerate an unusual folder and after some time, I found a salted password in SHA1 format. I was able to search and find a script that automated the process of cracking the hash and gaining root access to the machine.

Solved new machine .......Codify simple box easy to exploit

A good machine is repeatedly debugged

🎉 Completed Another Machine from Hack The Box! 🎉 🔒 Machine: Horizontall 📖 Write-Up: "https://lnkd.in/gd2iUCGr" 💡 Key Learnings: -> Strapi Exploitation -> Tunneling -> Laravel Exploitation #LinuxExploitation

I really think that machines from HTB are way more developed then THM, but both are very useful for studying, I am now migrating to Hackthebox, and in this EASY room I had some hard time but could make it trough watching videos and following mr. Bishal Ray -#GxbNt writeup. This way I could understand how to harden shell, and understand that if we can see, have patience, and keep on searching for more resources online, we understand how it works.

08/01/24 Round I: solved largest element in an array using RECURSION.

I had the opportunity to complete a task assigned by my mentor. I received a challenge from Febi Mudiyanto to 'pwn' a machine on Hack The Box. My goal was to obtain both the user flag and the root flag from a machine called 'Usage'. After successfully completing the machine, I wrote a write-up to document the steps and techniques used during the process. Check out my write-up on Medium and let me know what you think! #HackTheBox #WriteUp #Medium #InfoSec write-up link: https://lnkd.in/gZ_EKP3M

Bizness has been Pwned Lesson learned : Apache ofbiz, Hash cracking, Remote Code Execution

🛡️ Irked Machine Cracked! 💻 Excited to share that I’ve successfully completed the "Irked" machine on Hack The Box! This challenge pushed my skills in service enumeration, exploitation, and privilege escalation. Key takeaways from this experience: 1️⃣ Used nmap for in-depth scanning and enumeration. 2️⃣ Learned about IRC (Internet Relay Chat) protocol. 3️⃣ Exploited UnrealIRC in order to get initial access to the server. 4️⃣ Performed Steganography for horizontal privilege escalation. 5️⃣ Exploited a SUID binary (/usr/bin/viewuser) in order to escalate privileges vertically. writeup :--> https://lnkd.in/gu4dWj3q try it :--> https://lnkd.in/gCuWTKZN

"Day 39 of #100DaysOfCoding: ✅solved validating words and counting 1-bits. Also, revised recursion, sorting, and complexity analysis. 💻 #100daysofcoding #Recursion #Sorting #AlgorithmAnalysis"#bitmanipulation