HackTheBox: Vaccine Room - Revision history

CNinaus at 22:31, 18 December 2024

2024-12-18T22:31:36Z

← Older revision		Revision as of 22:31, 18 December 2024
Line 124:		Line 124:
	</syntaxhighlight>		</syntaxhighlight>
	Escape to a root shell:		Escape to a root shell:
	<syntaxhighlight lang="vi">		<syntaxhighlight lang="bash">
	:! /bin/bash		:! /bin/bash
	</syntaxhighlight>		</syntaxhighlight>

CNinaus at 22:30, 18 December 2024

2024-12-18T22:30:33Z

← Older revision		Revision as of 22:30, 18 December 2024
Line 148:		Line 148:
	* https://hackthebox.com		* https://hackthebox.com
	* https://revshells.com		* https://revshells.com
	* https://gtfobins.github.io/		* https://gtfobins.github.io
	* https://nmap.org/		* https://nmap.org

	[[Category:Documentation]]		[[Category:Documentation]]

CNinaus at 22:29, 18 December 2024

2024-12-18T22:29:29Z

← Older revision		Revision as of 22:29, 18 December 2024
Line 1:		Line 1:
	[[File:Vaccine.png\|thumb\|Vaccine Room<ref>~~Quelle~~: [https://app.hackthebox.com/starting-point?tier=2]</ref>]]		[[File:Vaccine.png\|thumb\|Vaccine Room<ref>HackTheBox: [https://app.hackthebox.com/starting-point?tier=2]</ref>]]

	Vaccine is an Easy-level machine on the HackTheBox platform, designed to introduce participants to the basics of web application security, exploitation, and privilege escalation. It is an excellent starting point for beginners who want to improve their penetration testing skills and understand common web vulnerabilities in a controlled environment.		Vaccine is an Easy-level machine on the HackTheBox platform, designed to introduce participants to the basics of web application security, exploitation, and privilege escalation. It is an excellent starting point for beginners who want to improve their penetration testing skills and understand common web vulnerabilities in a controlled environment.

CNinaus at 22:28, 18 December 2024

2024-12-18T22:28:31Z

← Older revision		Revision as of 22:28, 18 December 2024
Line 1:		Line 1:
			[[File:Vaccine.png\|thumb\|Vaccine Room<ref>Quelle: [https://app.hackthebox.com/starting-point?tier=2]</ref>]]

	Vaccine is an Easy-level machine on the HackTheBox platform, designed to introduce participants to the basics of web application security, exploitation, and privilege escalation. It is an excellent starting point for beginners who want to improve their penetration testing skills and understand common web vulnerabilities in a controlled environment.		Vaccine is an Easy-level machine on the HackTheBox platform, designed to introduce participants to the basics of web application security, exploitation, and privilege escalation. It is an excellent starting point for beginners who want to improve their penetration testing skills and understand common web vulnerabilities in a controlled environment.

CNinaus at 22:24, 18 December 2024

2024-12-18T22:24:37Z

← Older revision		Revision as of 22:24, 18 December 2024
Line 115:		Line 115:
	Key finding: The '''vi''' binary can be run with sudo.		Key finding: The '''vi''' binary can be run with sudo.

			Refer to [[https://gtfobins.github.io/ GTFOBins]] for escape techniques.

			Launch vi as sudo:
			<syntaxhighlight lang="bash">
			sudo vi
			</syntaxhighlight>
			Escape to a root shell:
			<syntaxhighlight lang="vi">
			:! /bin/bash
			</syntaxhighlight>
			Verify root access and retrieve the flag:
			<syntaxhighlight lang="bash">
			whoami
			cat /root/root.txt
			</syntaxhighlight>

			== Conclusion ==

	~~=== Capture the Flag ===~~		The Vaccine machine demonstrates essential techniques for penetration testing:

	~~== Conclusion ==~~		* Service enumeration.
			* Password cracking with John the Ripper.
			* SQL injection exploitation with SQLMap.
			* Privilege escalation using sudo misconfigurations and GTFOBins.

			These skills are foundational for understanding system vulnerabilities and exploitation methods.

	== References ==		== References ==
Line 127:		Line 146:
	* https://hackthebox.com		* https://hackthebox.com
	* https://revshells.com		* https://revshells.com
	* https://gtfobins.~~com~~		* https://gtfobins.github.io/
			* https://nmap.org/

	[[Category:Documentation]]		[[Category:Documentation]]

CNinaus at 22:19, 18 December 2024

2024-12-18T22:19:00Z

@@ Line 29: / Line 29: @@
 == Walkthrough ==
-=== Reconnaissance ===
+=== Reconnaissance & Enumeration ===
-=== Enumeration ===
+'''FTP''': Configured to allow anonymous login.
 === Exploitation ===
 === Post-Exploitation ===
 === Privilege Escalation ===
 === Capture the Flag ===
@@ Line 47: / Line 125: @@
 == References ==
-* https://wikipedia.org
+* https://hackthebox.com
-* https://google.com
+* https://revshells.com
 [[Category:Documentation]]

CNinaus: Created page with "Vaccine is an Easy-level machine on the HackTheBox platform, designed to introduce participants to the basics of web application security, exploitation, and privilege escalation. It is an excellent starting point for beginners who want to improve their penetration testing skills and understand common web vulnerabilities in a controlled environment. == Objectives == The main objectives of the Vaccine room are: 1. Identify and exploit vulnerabilities in a web applicati..."

2024-12-18T21:41:23Z

Created page with "Vaccine is an Easy-level machine on the HackTheBox platform, designed to introduce participants to the basics of web application security, exploitation, and privilege escalation. It is an excellent starting point for beginners who want to improve their penetration testing skills and understand common web vulnerabilities in a controlled environment. == Objectives == The main objectives of the Vaccine room are: 1. Identify and exploit vulnerabilities in a web applicati..."

New page

Vaccine is an Easy-level machine on the HackTheBox platform, designed to introduce participants to the basics of web application security, exploitation, and privilege escalation. It is an excellent starting point for beginners who want to improve their penetration testing skills and understand common web vulnerabilities in a controlled environment.

== Objectives ==

The main objectives of the Vaccine room are:

1. Identify and exploit vulnerabilities in a web application.

2. Gain initial foothold through web exploitation techniques.

3. Escalate privileges to root access by analyzing misconfigurations or vulnerabilities in the system.

== Tools and Techniques ==

Participants may use a variety of tools to complete this room, including:

* '''Reconnaissance tools''': nmap, gobuster, dirb.
* '''Exploitation tools''': Burp Suite, Metasploit (if needed), or manual payload crafting.
* '''Post-exploitation tools''': linpeas, pspy, or custom scripts for local privilege escalation.

Following techniques will be required:

* Web application vulnerability analysis.
* Exploiting common misconfigurations.
* Utilizing tools for enumeration and exploitation.
* Privilege escalation techniques.

== Walkthrough ==

=== Reconnaissance ===

=== Enumeration ===

=== Exploitation ===

=== Post-Exploitation ===

=== Privilege Escalation ===

=== Capture the Flag ===

== Conclusion ==

== References ==

* https://wikipedia.org
* https://google.com

[[Category:Documentation]]