Category: pentesting

Basic commands for local OS enumeration

Comprehensive writeup of the HackTheBox machine 'Conversor' involving XSLT/XXE RFI to gain a reverse shell, then simple privilege escalation using a `perl` script with `NOPASSWD` `sudo` privileges and a malicious 'config' file

Basic commands for local OS enumeration

Comprehensive writeup of the HackTheBox machine 'Conversor' involving XSLT/XXE RFI to gain a reverse shell, then simple privilege escalation using a `perl` script with `NOPASSWD` `sudo` privileges and a malicious 'config' file