So far, I've been able to exploit about 20 servers from hackthebox.eu. In this video I demonstrate how I completely pwned (got into and escalated my privileges to the top user account) for the machine called SolidState.
For those who don't know, hackthebox is a platform on which you can safely and legally practice and grow your cybersecurity skills. Personally, it help me tremendously on multiple plans. First, it made develop a thoroughness of writing carefully planning vectors of attack depending on the situation.
Secondly, it made me start writing detailed reports of what I've been doing at every step of the way. And to be honest, I do this in my real-life cybersecurity assessments. But, I digress...
The vector of attack for this one was quite straightforward: it was running a James server with default credentials. And that unleashed the storm...
I hope you enjoy the demonstration.
To stay in touch with me, follow @cristi
Cristi Vlad Self-Experimenter and Author