00:00 - Intro 00:45 - Checking the web page, then running a SecList wordlist for CommonBackdoors 03:30 - GoBuster returned 04:15 - Attempting to guess the password, get in with admin:admin 05:55 - Running script prior to my reverse shell to log the output... I forget to check this again but it did work! 07:30 - Reading which hints at finding a LUA File, using find to hunt for files 09:05 - The reverse shell is misbehaving, lets fix it by setting the the rows/columns 12:10 - Running LinPEAS, discover sudo with luvit; then looking up how to write files with a lua script 16:10 - SSH'ing in with SysAdmin after our key was written 18:50 - Using find some more to hunt for interesting files 23:11 - Using find to search between dates of interest shows an interesting backup directory 25:40 - Running pSpy to search for running processes 30:00 - Puzzled... Probably should have ran find commands to look for files edited within the last day! 32:40 - Cha
Hide player controls
Hide resume playing