Скачать
Ollie - TryHackMe - SQL Injection - Remote Code Execution - CVE-2022-23046
Автор: Security_cnr
Загружено: 2022-09-09
Просмотров: 448
Описание:
In this lab, we exploited an "unfixed" SQL injection issue in one of the web applications (CVE-2022-23046). We tried #SQL injection to create a shell file and remotely executed the file (#RCE) to establish a callback and gain the foothold on the target machine. As the next step, we moved horizontally in the system and became the user Ollie. Finally, we exploited a cronjob where the binary was owned by the root but could be changed by Ollie. A new reverse shell enabled us to gain the root privileges on the target machine.
Доступные форматы для скачивания:
Скачать видео mp4
-
Информация по загрузке:
