Windows Event Logs » THOVITI SIDDHARTH

April 22, 2023

Investigation – HackTheBox Writeup

Thoviti Siddharth HackTheBox, Infosec binary analysis, code review, command injection, exiftool, Ghidra, HackTheBox, HTB, Infosec, LinPeas, Linux Box, Privilege Escalation, sudo -l, Windows Event Logs, Writeup 0

Machine Name: Investigation
IP: 10.10.10.197
Difficulty: Medium

Summary

Investigation is a medium machine that has a web server vulnerable to command injection vulnerability. With enough enumeration, it is easy to exploit command injection. However, it only leads to a shell as www-data. Getting a user shell requires some log file analysis and common sense. Privilege escalation deals with binary analysis and code review.