tsustyle

Red Team Aspirant

Commitment

less than 1 minute read

img

Should I be worried that immediately upon reading ‘Commitment’ I thought of github?

img

img

Hmm ineed. Let’s check out the dev branch

img

There we go. Lots more to look at now.

Let’s browse through the commits since the challenge is called ‘Commitment’.

This is the commit we’re looking for:

img

img

You may also enjoy

Tenet

 

‘Tenet’ is a medium rated box on Hack the Box. We’ll be using PHP Object Injection to get RCE and identify a race condition in a custom script for privesc.

Skynet

 

‘Skynet’ is a box on TryHackMe. We’ll be enumerating SMB shares, brute forcing a login and exploiting a Remote File Inclusion vulnerability in Cuppa CMS for a foothold. For our root shell we’ll take a look at exploiting some wildcard injection using a script that’s being run as a cronjob.

FFuF Cheatsheet

 

This is a Cheatsheet I created for reference when using FFuF

Ready

 

‘Ready’ is a medium rated box on Hack the Box. We’ll be using a public exploit for a vulnerable Gitlab version for a shell, enumeration and password reuse for privesc and escape a docker container for root