Buff | HackTheBox

Source: https://www.hackthebox.eu/home/machines/profile/263

— — — — — — Table of Contents — — — — — —
— Introduction
— Scanning
— Enumeration
— Vulnerability Analysis
— Exploitation
— Privesc
— Summary | TL;DR
— Parting Thoughts
— — — — — — — — — — — — — — — — — — — —

Introduction

This is the second active machine that I am trying to solve.

The introduction suggests that this machine is based on a CVE. Let’s dive in and get root! BOOM BOOM!

Scanning

Target IP: 10.10.10.198

Nmap Scan

nmap -sV -A -Pn $target

-sV : Probe open ports to determine service/version info
-A : Enable OS detection, version detection, script scanning, and traceroute
-Pn : Treat all hosts as online — skip host discovery

> ------------------------Nmap Results-----------------------------<…