Offsec Proving Grounds Walkthrough – SpringAuth_Attack

Posted inEthical Hacking, Hacking, Linux, Networking, Offsec, Python, Security, Tutorial, Walkthrough
Walkthrough of the machine called "SpringAuth_Attack" in the Offsec Proving Grounds...this is a Linux machine rated as Intermediate. In this video we take advantage of anonymous FTP as well as a directory traversal/auth bypass bug in the SpringAuth Framework to gain an initial foothold. We then exploit a regularly schedule…

Offsec Proving Grounds Walkthrough – Mice

Posted inEthical Hacking, Hacking, Linux, Networking, Offsec, Python, Security, Tutorial, Virtual Machines, Walkthrough
Walkthrough of the machine called "Mice" in the OffSec Proving Grounds...this is a Windows machine rated as Easy. In this video we take advantage of an exploitable version of remote mouse in multiple ways, once to get a foothold and again to get system administrator access once connected via xrdp.…

Offsec Proving Grounds Walkthrough – Pelican

Posted inEthical Hacking, Hacking, Linux, Networking, Offsec, Python, Security, Tutorial, Walkthrough
Walkthrough of the machine called "Pelican" in the OffSec Proving Grounds...this is a Linux machine rated as Intermediate. In this video we take advantage of an exploitable program called Exhibitor for Zookeeper to gain a foothold. I then show you how to use an incorrectly set "sudo no password" on…

Offsec Proving Grounds Walkthrough – Walla

Posted inEthical Hacking, Hacking, Linux, Networking, Offsec, Python, Raspberry Pi, Security, Tutorial, Walkthrough
Walkthrough of the machine called "Walla" in the OffSec Proving Grounds...this is a Linux machine rated as Intermediate. In this video we take advantage of RaspAP using default credentials, then we privesc using python library hijacking! I thought this was an easy one! https://youtu.be/moCaxsptbhA

Offsec Proving Grounds Walkthrough – Spider Society

Posted inEthical Hacking, Hacking, Linux, Networking, Offsec, Security, Systemd, Tutorial, Walkthrough
Walkthrough of the machine called "SpiderSociety" in the OffSec Proving Grounds...this is a Linux machine rated as Intermediate. In this video we use gobuster to find a hidden directory which provides access to a login page configured default credentials, then we use some FTP credentials we discover to find a…