Skip to main content
CPEBuddy
HackTheBox - Editorial

HackTheBox - Editorial

Source: YouTube · IppSec · published Oct 19, 2024 · 23:55

Penetration Testing
No ratings yet Log in to rate
Transcript Available
Description

This Hack The Box walk-through demonstrates a privilege escalation path starting from an SSRF vulnerability, leveraging leaked credentials in Git history, and exploiting a Python get library vulnerability for command execution.

Key Takeaways:
• The initial foothold is gained via Server Side Request Forgery (SSRF), which allows access to localhost ports, including an internal API server 0:05.
• Enumeration reveals a developer message containing credentials, which are used to SSH into the box 0:15.
• Reviewing Git commit history exposes a second set of credentials for a different user 0:22.
• Privilege escalation is achieved by exploiting a vulnerability in the Python get library, allowing command execution via a specific URL scheme 0:33.

The video illustrates a realistic attack chain involving multiple low-hanging fruits and common configuration mistakes.

Sources:

  • 0:05 Introduction to the box and SSRF vector.
  • 0:15 Discovery of developer credentials.
  • 0:22 Finding second set of credentials in Git history.
  • 0:33 Explanation of the Python get library vulnerability.

Generate CPE Credits

Generate a professional CPE document from this video's transcript.

Estimated credit: 0.5 CPE hours

Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.

Topic: Penetration Testing. Commonly maps to: Security Assessment and Testing, Security Operations. Exact CISSP domains are assigned during generation.

CISSP Domain Mapping
Learning Objectives
Self-Assessment Questions
PDF Export Ready

Free account. One generation at a time, with a daily limit.

CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.

Watch on YouTube

Transcript Preview

First 800 characters of the transcript

what's going on YouTube this is ipag I'm do an editorial from hack the box which is a nice simple easy box it starts off with a server side request forgery they can use to access ports listening on Local Host and one of which is running an API server if you do some late enumeration you discover there's a message to a developer that contains credentials you can use those to SSH into the box and then looking around you discover the um get commit history and one of the commits does contain another set of credentials so you can switch to another user that is able to pseudo with a python script and that python script is using the um get python library that has a vulnerability in it if you give it a um URL that uses the shell extension you can actually execute commands so with all that being sai…