pentestPromedium

Atkomst Nekad (Access Denied)

undutmaning

English summary: Multi-step challenge requiring OSINT from a psychological report to discover username and password patterns, bcrypt hash cracking from a Roundcube mail server backup, SSH access to an internal network, and exploitation of phpMyAdmin 4.8.1 LFI vulnerability (CVE-2018-12613) to read t

$ ls tags/ techniques/
lfiosintdirectory_traversalpassword_crackingsshroundcubebusyboxcredential_reusebcryptpokemon_wordlistphpmyadmincve-2018-12613internal_networksql_backuppsychological_profile
bcrypt_hash_crackingpsychological_profile_analysistargeted_wordlist_generationcredential_reuse_exploitationssh_accessinternal_network_enumerationphpmyadmin_lficve_2018_12613_exploitation
🔒

Permission denied (requires tier.pro)

Sign in to access full writeups

Sign in with GitHub to continue. No email required.

$sign in

$ grep --similar

Similar writeups