This box involves exploiting Dolibarr 17.0.0 for remote code execution (RCE) as an authenticated user, gaining access as the www-data user. By understanding the exploit and examining the configuration files, credentials can be found to escalate privileges to user. Additionally, the system is vulnerable to CVE-2022-37706, which allows…
The journey begins by using a custom word list to find a subdomain running TeamCity 2023.05.03, which is vulnerable to CVE-2023-42793. This vulnerability allows the creation of a privileged user without authentication. Next, a backup containing a private key is found, providing the first SSH access as a…
Learn how to set up DNS-over-HTTPS (DoH) on your Raspberry Pi for enhanced internet privacy and security. Follow our step-by-step guide to install dnscrypt-proxy, configure DNS resolvers, and integrate with dnsmasq and pi-hole…
It is possible to perform Windows UAC bypass and gain administrative privileges by abusing the Properties of any network adapter.…
Learn how to securely set up SFTP jail on Linux with our step-by-step guide. Enhance file transfer security and restrict user access effectively.…
Box overview MonitorsTwo is an easy box created by kavigihan combining the exploitation of Cacti (CVE-2022-46169) as entry point then privilege escalation by exploiting the CVE-2021-41091. Initial foothold Add the IP to the hosts file Firstly, I will update the hosts file entry with the box hostname and its IP.…
Learn how to self-host Vaultwarden with step-by-step instructions for setting up secure password management on your own servers.…
DnsShield is a powerful and user-friendly script designed to automate the updating process of blocklists for Dnsmasq. With DnsShield, you can effortlessly maintain an up-to-date and comprehensive blocklist, enhancing security and privacy by blocking access to malicious or unwanted domains.…