HackTheBox - Compiled
Source: YouTube · IppSec · published Dec 14, 2024 · 1:14:15
The video demonstrates a privilege escalation on the "Compiled" Hack The Box machine, exploiting a vulnerable Git service for initial access and a misconfigured Visual Studio COM object to achieve SYSTEM-level privileges.
Key Takeaways:
• The target runs a web service that performs recursive git clones against user-specified repositories 0:30
• Initial access is gained by identifying Git version 2.45.0 via user agent and exploiting a symlink CVE to write a post-checkout hook 0:38
• The Gitea database is extracted and hashes are cracked to obtain Emily's credentials for shell access 0:45
• Privilege escalation exploits the VS Standard Collector Service, triggered via COM objects to run as SYSTEM similar to a setuid binary 0:18
This walkthrough highlights the importance of auditing installed services and COM objects for privilege escalation vectors in Windows environments.
Sources:
- 0:00 Introduction to the "Compiled" Hack The Box machine
- 0:05 Explanation of the privilege escalation difficulty
- 0:18 Description of the service allowing SYSTEM execution
- 0:30 Details on the vulnerable git service
- 0:38 Exploitation of the Git CVE for initial access
- 0:45 Gitea database extraction and hash cracking
Generate CPE Credits
Generate a professional CPE document from this video's transcript.
Estimated credit: 1 CPE hours
Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.
Topic: Cybersecurity. Commonly maps to: Security and Risk Management, Security Operations. Exact CISSP domains are assigned during generation.
Free account. One generation at a time, with a daily limit.
CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.
Transcript Preview
First 800 characters of the transcript
what's going on YouTube this is IPC and today we'll be doing compiled from hack the box which the hardest part of this machine is probably the prives because most Windows privilege escalation involves misconfigurations or running processes this is vulnerable just because a piece of software is installed it's not running at the time of exploitation um it gives the users the ability to start a specific service which will run as system so in that sense it's kind of similar to a set uid binary on Linux but on Windows it's just really tough to find because it's hidden behind com objects and things like that but before we get there we'll have to exploit a web server which will run a recursive git clone against repositories we specify we can look at the user agent to see it's running a vulnerable…