HackTheBox - Sea
Source: YouTube · IppSec · published Dec 21, 2024 · 1:03:46
This video details the exploitation of the Hack The Box machine "C" 2:15, focusing on identifying Wonder CMS and leveraging a modified XSS payload for initial access 0:15-0:25.
Key Takeaways:
• Identifying Wonder CMS requires enumerating theme directories and searching GitHub for unique CSS strings, as it is not immediately obvious from standard headers 0:07-0:11.
• A GitHub exploit script fails initially because the XSS payload incorrectly uses a relative path; modifying it to use the hostname resolves the issue 0:15-0:23.
• Successful exploitation of the modified XSS payload grants a shell, allowing for password hash cracking and user enumeration 0:25-0:27.
• Post-exploitation involves finding a command injection vulnerability in a local PHP monitoring service for root access 0:27-0:30.
The walkthrough highlights the importance of adapting generic exploit scripts when payloads fail and understanding local service configurations during penetration testing.
Sources:
- 2:15 Introduction to the Hack The Box machine "C" and Wonder CMS challenge
- 0:07 Techniques for identifying the CMS through theme enumeration
- 0:15 Discovery of GitHub exploit script and required modifications
- 0:23 Explanation of why the original XSS payload fails
- 0:25 Successful payload execution to gain shell access
- 0:27 Command injection in local monitoring service
Generate CPE Credits
Generate a professional CPE document from this video's transcript.
Estimated credit: 1 CPE hours
Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.
Topic: Penetration Testing. Commonly maps to: Security Assessment and Testing, Security Operations. Exact CISSP domains are assigned during generation.
Free account. One generation at a time, with a daily limit.
CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.
Transcript Preview
First 800 characters of the transcript
what's going on YouTube this is ipag we doing C from hack the box which starts off with hacking a Wonder CMS web server now identifying its Wonder CMS can be a little bit tricky but I'll show a few ways to do that all centered around enumerating the themes but once you do that you can find a proof of concept exploit script on GitHub you pull that down and when you try to run it it doesn't work you have to make a few modifications because the xss payload just isn't working but once you do that you get a shell on the box and then the next step involves finding a command injection in a web server that's listening on Local Host in the Beyond route we'll go really look at the cross-site scripting because it's relatively interesting so with all that being said let's just jump in as always we're …