HackTheBox - Previous

This video demonstrates the exploitation of a Next.js middleware authentication bypass, leading to file disclosure and privilege escalation via Terraform command injection 0:00.

Key Takeaways:
• The challenge begins by exploiting a known Next.js middleware vulnerability to bypass authentication and access protected endpoints 0:06.
• Post-authentication, a file disclosure vulnerability enables examining the website's dependencies 0:15.
• Analysis of dependencies reveals stored credentials, allowing SSH access to the target machine 0:19.
• Privilege escalation is achieved by exploiting a sudo rule that permits running specific Terraform commands 0:25.
• Two methods leverage environment variables to override defaults, using symbolic links for file read and write access 0:30.
• A third method poisons the Terraform configuration file to redirect provider loading, executing a set-UID binary for root access 0:29.

The walk-through illustrates a realistic attack path from initial access to root, highlighting the importance of secure middleware configuration and strict sudo rules.

Sources:

• 0:00 Introduction to the Hack the Box challenge and Next.js vulnerability
• 0:06 Exploiting the Next.js middleware to bypass authentication
• 0:15 Discovering file disclosure and analyzing dependencies
• 0:19 Finding credentials and SSHing into the box
• 0:25 Ex