HackTheBox - Pilgrimage

00:00 - Introduction 00:55 - Start of nmap 03:00 - Uploading an image file and trying to identify how the upload works 06:20 - Running Git-Dumper to download the exposed .git directory, taking a look at the source code 09:45 - Looking at the ImageMagick version () and seeing it is vulnerable to CVE-2022-44268 13:30 - Generating a malicious image and downloading the sqlite database 19:30 - Doing a PS and seeing inotifywait is being used to run a bash script when files created in web directory 21:35 - Showing why the bash script is not vulnerable 28:00 - Finding a binwalk exploit for version , which takes advantage of path traversal in PFS files 32:50 - Taking a look into the exploit to see how it works 35:30 - Showing the PFS File Format