• UpDown

    The content outlines a penetration testing scenario against a target server running SSH and Apache. Initial scans reveal service details, leading to directory enumeration, access to a .git directory, and the development of a reverse shell script. Eventually, the tester exploits a SUID script for privilege escalation, gaining access to the root flag.

  • Trick

    The target system was initially scanned, revealing several services, including Nginx and an SMTP server. A subdomain was discovered, leading to a login page. After exploiting SQL injection, files were read, and a reverse shell was established. Privilege escalation was achieved through a writable directory, ultimately gaining root access and retrieving the root flag.

Categories