Privilege Escalation

August 13, 2023

Busqueda – HackTheBox Writeup

Thoviti Siddharth HackTheBox, Infosec Code Injection, Docker, eval(), Gitea, HackTheBox, HTB, Infosec, Injection, Linux Box, MySQL, Path Hijacking, Privilege Escalation, Relative Path Hijacking, Searchor, sudo, Writeup 0

Machine Name: Busqueda
IP: 10.10.11.208
Difficulty: Easy

Summary

Busqueda is an easy machine that challenges you to read code, find the vulnerability, and craft syntactically correct payloads that suit the code when injected. The privilege escalation is straight forward and explores relative path hijacking through SUID scripts to get root.

April 22, 2023

Investigation – HackTheBox Writeup

Thoviti Siddharth HackTheBox, Infosec binary analysis, code review, command injection, exiftool, Ghidra, HackTheBox, HTB, Infosec, LinPeas, Linux Box, Privilege Escalation, sudo -l, Windows Event Logs, Writeup 0

Machine Name: Investigation
IP: 10.10.10.197
Difficulty: Medium

Summary

Investigation is a medium machine that has a web server vulnerable to command injection vulnerability. With enough enumeration, it is easy to exploit command injection. However, it only leads to a shell as www-data. Getting a user shell requires some log file analysis and common sense. Privilege escalation deals with binary analysis and code review.

April 27, 2022

Unquoted Service Path for Privilege Escalation and Persistence

Thoviti Siddharth Infosec Persistence, Privilege Escalation, Unquoted Service Path, Windows Privilege Escalation 0

In this blog post, I demonstrate how Unquoted Service Paths as a misconfiguration in services can be exploited to achieve privilege escalation and persistence.

April 16, 2022

DLL Hijacking for Privilege Escalation and Persistence

Thoviti Siddharth Infosec DLL Hijacking, Persistence, Privilege Escalation, Windows Privilege Escalation 0

Is DLL Hijacking a vulnerability?
Read until the end to find out!

In this blog-post, I introduce DLL Hijacking, how this method can be exploited to achieve privilege escalation and persistence, and demonstrate the same through three lab simulations. I also list some defenses against DLL Hijacking at the end. To understand DLL Hijacking, it is important to understand what DLLs are and how the DLL Search Order works.