Skip to main content
CPEBuddy
HackTheBox - Yummy

HackTheBox - Yummy

Source: YouTube · IppSec · published Feb 22, 2025 · 1:11:35

Penetration Testing
No ratings yet Log in to rate
Transcript Available
Description

This video details the exploitation of the "Yummy" Hack The Box machine, where multiple vulnerabilities must be chained to achieve code execution.

Key Takeaways:
• The initial foothold relies on a file disclosure vulnerability that exposes source code and cron jobs 0:15.
• Analysis of cron jobs reveals that writing data to the server's directory can lead to remote code execution 0:20.
• A JWT token is signed with a weak RSA secret that can be factored to forge administrator privileges 0:27.
• Forged admin tokens allow access to specific endpoints necessary for further exploitation 0:34.

The challenge emphasizes the importance of combining seemingly minor vulnerabilities to gain full system access.

Sources:

  • 0:15 File disclosure vulnerability introduction
  • 0:20 Cron job analysis and RCE potential
  • 0:27 Weak JWT secret exploitation
  • 0:34 Admin endpoint access via forged token

Generate CPE Credits

Generate a professional CPE document from this video's transcript.

Estimated credit: 1 CPE hours

Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.

Topic: Penetration Testing. Commonly maps to: Security Assessment and Testing, Security Operations. Exact CISSP domains are assigned during generation.

CISSP Domain Mapping
Learning Objectives
Self-Assessment Questions
PDF Export Ready

Free account. One generation at a time, with a daily limit.

CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.

Watch on YouTube

Transcript Preview

First 800 characters of the transcript

what's going on YouTube this is IPC and today we'll be doing yummy from hack the box which the foothold is a bit of a mess because right off the bat the web application has multiple vulnerabilities but in order to do anything meaningful you'll have to combine all the vulnerabilities which are three or four right the first is a file disclosure vulnerability which lets you download the source code you can also see crons that are running on the server and if you inspect the crons you'll discover that if you can write data to the dis of the server you can likely get code execution the second vulnerability is a JWT assigned via RSA with a weak secret that you can quickly Factor so you can manipulate the JWT and say you're administrator and being administrator lets you access um some end points …