tryhackme publisher walkthrough

Описание: Let's take on the Publisher machine from TryHackMe! We'll enumerate using directory fuzzing and version identification to discover a Remote Code Execution (RCE) vulnerability. From there, we'll dive into attempts to escalate privileges using a custom binary, but hit some roadblocks due to restricted access. But we'll dig deeper to uncover a loophole that lets us execute an unconfined bash shell and achieve privilege escalation.

Subscribe -    / @mrashco  

Keep Watching:
python ollama read local file (EASY) -    • python ollama read local file (EASY)  
notion to obsidian (a better note solution) -    • notion to obsidian (a better note solution)  
cyber security for beginners -    • cyber security for beginners (plus FREE re...  

Blog - https://mrash.co/

- -

00:00 - Intro
00:04 - Challenge Description
00:47 - Initial Enumeration (AutoRecon + nmap)
04:00 - Directory Fuzzing (feroxbuster)
05:29 - Exploit Research (searchsploit)
10:23 - Pivoting to System User (SSH)
12:07 - Internal System Enumeration
16:12 - PrivEsc (LinPeas)

- -

ctf, publisher, ctf machine, enumeration, directory fuzzing, version identification, remote code execution, rce, privilege escalation, custom binary, loophole, bash shell, system security, restricted access, cybersecurity, hacking, penetration testing, ethical hacking, infosec, vulnerability, exploit, exploit development, security research, hacking tutorial, beginner friendly, ctf walkthrough, cybersecurity tutorials

- -

Subs: 2,468
Hours: 10

- -

Music - https://go.mrash.co/music

All of my opinions in this video are my own, I was not paid to make this video. Whenever there is a link in any of my videos, if there is an affiliate program available, it's safe to assume that you are clicking on an affiliate link. Please check my website for any associated bonus I may be offering, for supporting me or ask in the comments below.

#tryhackme #publisher #walkthrough