Shellshock

Exploring the Working Principle, Exploitation Techniques, and Prevention Strategies for the Shell Shock Vulnerability | Karthikeyan Nagaraj — Introduction: Shell Shock, also known as the Bash Bug, is a critical security vulnerability that affects Unix-based operating systems. It was discovered in 2014 and can allow attackers to execute arbitrary code on affected systems. This article aims to provide a comprehensive guide to the Shell Shock vulnerability, including its working…

Shell Shock is a shocking mistake that was lying under everyone’s nose for 25 years. It exploits a feature of Bash (≤ Version 4.3). Let’s deal with it. Prerequisite Knowledge What is Bash ? Ans : Bash is a shell that executes our commands, scripts or whatever the junk we…

Shocker is a an easy box and once you get the idea it is really easy to get its access and even escalate your privileges. …

Treatment of saysquack battlefield nervous conditions August 13th, 1917 A Somewhat Brief, Perfunctory, Foreshortened, and Cursory Overview of Battlefield Nervous Conditions of the Homo saysquackus americanae olympii (also known as “Saysquack” or “bigfoot”), Their Genesis, Prognosis, and Current Treatment Methodologies, Captain David Goodfellow, M.D., Journal of Mammalian Psychiatry, Vol. …

Reconnaissance Scan the target machine with nmap There are many open ports on this machine, but only few of them that stands out from an attacking standpoint 443 and 80 (HTTPS & HTTP) 10000 (HTTP/S) 25 (SMTP) Let’s check the web page on port 10000 first

Reconnaissance Scan the target machine with nmap The scan identified 2 open ports SSH (2222) HTTP (80) This implies that the vulnerability is on the web service

Introduction 0day is a medium level room on tryhackme, with one user flag and one root flag. The room will require solid enumeration of the target, and the exploitation of two published CVE’s. This post will detail the steps I took to complete the room as well as my thought process…

0Day is a medium rated box from TryHackMe and the description of the box says: ”Exploit Ubuntu, like a Turtle in a Hurricane” User As such, let’s start of with a NMAP scan. So we have 2 ports open. Port 22 and port 80. 22 for SSH and 80 for HTTP…

Going back to my roots today and doing a Try Hack Me room! It’s called 0day and uses Shellshock & Ubuntu Kernel exploits… yay! This room is level medium, but I found it to be very straight forward. Okay so first obvious step is going to be Nmap. …