HackTheBox - DarkCorp

The video demonstrates a complex penetration test of the "Dark Corp" Hack the Box machine, focusing on leveraging Cross-Site Scripting (XSS) and credential relaying to achieve domain administration. 0:00

Key Takeaways:
• The initial entry point involves a cross-site scripting vulnerability in the RoundCube webmail client, allowing the attacker to read a user's entire inbox. 0:26
• Information gathered from the inbox leads to a SQL injection vulnerability in another service, which requires specific evasion techniques to exploit successfully. 0:34
• Exploiting the SQL injection results in remote code execution and obtaining an initial shell on the target machine. 0:36
• The post-exploitation phase heavily features advanced Active Directory attacks, including NTLM relaying and Kerberos relay, to escalate privileges and gain domain admin access. 0:09

Mastering these advanced relaying techniques is crucial for pentesters, as they provide powerful methods for privilege escalation when traditional paths are blocked.

Sources:

• 0:00 Introduction to the Dark Corp machine and its complexity.
• 0:26 Discovery of the RoundCube XSS vulnerability.
• 0:34 Identification and exploitation of the SQL injection.
• 0:36 Achieving initial command execution.
• 0:09 Overview of NTLM and Kerberos relaying techniques used later in the box.