Cyber Security | Penetration Test | CTF | Corrosion 1 | Exploit File Inclusion By Poisoning Log File
In this video, I demonstrate a step-by-step guide to uncovering and exploiting vulnerabilities on a target system. Starting with deeper directory enumeration, I show how to discover a critical target file using fuzzing techniques to identify hidden parameters. Encoding payloads becomes essential for gaining a shell on the target system, and I walk through the process of crafting these payloads effectively.
Next, I delve into exploiting a file inclusion vulnerability, which requires poisoning the log file. However, updated versions of Kali Linux impose restrictions on usernames containing invalid characters, creating a hurdle for exploitation. I provide a clear fix for this issue, ensuring smooth progress.
Finally, I cover privilege escalation, demonstrating how to elevate access on the compromised system. This comprehensive walkthrough equips you with practical techniques for penetration testing and highlights critical steps for overcoming common challenges.
👉 Topics Covered:
Directory enumeration
Fuzzing for hidden parameters
Encoding payloads for shell access
Log file poisoning for file inclusion
Fixing username restrictions in Kali Linux
Privilege escalation techniques
Don’t forget to like, comment, and subscribe for more in-depth cybersecurity and pentesting content!
#Cybersecurity #PenetrationTesting #KaliLinux #PrivilegeEscalation #FileInclusion#hackingtechniques #coding#remotecodeexecution
Machine Info:
~ Pentesting Lab Exercises Series - Vulnhub
~ Virtual Machine Name: Corrosion 1
~ Link: https://www.vulnhub.com/entry/corrosi...