Skip to main content
CPEBuddy
HackTheBox - PermX

HackTheBox - PermX

Source: YouTube · IppSec · published Nov 2, 2024 · 36:29

Penetration Testing
No ratings yet Log in to rate
Transcript Available
Description

This video demonstrates the penetration testing of the Hack The Box machine "PermX," focusing on exploiting an LMS subdomain to achieve root access 0:00.

Key Takeaways:
• The initial attack vector involves discovering an LMS subdomain running Camilo, an open-source training platform 0:05.
• An unauthenticated file upload vulnerability allows the attacker to upload a PHP shell to gain initial foothold 0:14.
• Extracting database credentials and testing them against local users leads to a user account capable of running bash scripts 0:21.
• Privilege escalation to root is achieved by creating a symbolic link in the home directory, bypassing file restrictions to access sensitive system files 0:34.

The walkthrough highlights the importance of chaining vulnerabilities, from file upload to credential reuse, and finally to filesystem manipulation for full system compromise.

Sources:

  • 0:00 Introduction to the PermX Hack The Box challenge.
  • 0:05 Discovery of the Camilo LMS subdomain.
  • 0:14 Exploitation of unauthenticated file upload vulnerability.
  • 0:21 Credential extraction and user access via database credentials.
  • 0:34 Root privilege escalation using symbolic links.

Generate CPE Credits

Generate a professional CPE document from this video's transcript.

Estimated credit: 0.5 CPE hours

Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.

Topic: Penetration Testing. Commonly maps to: Security Assessment and Testing, Security Operations. Exact CISSP domains are assigned during generation.

CISSP Domain Mapping
Learning Objectives
Self-Assessment Questions
PDF Export Ready

Free account. One generation at a time, with a daily limit.

CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.

Watch on YouTube

Transcript Preview

First 800 characters of the transcript

what's going on YouTube this is ipag we doing perm X from hack the box which essentially is just three steps the first of which is discovering the LMS subdomain which contains software called Camilo and this is an open source training platform if you search for exploits there's an unauthenticated file upload vulnerability so you can upload a PHP file and get onto the box once there if you extract the database credentials and try them with local users you can gain access to a user which has the ability to run bash scripts with pseudo that provides a way to give yourself right access to files via fle that are in your home directory however if you create a Sim Link in your home directory you can give yourself access to files outside of it and escalate to rout one of the extra things I did whe…