PWNX | Rusty Machine Walkthrough [Voice | Explained]
This time we are doing rusty machine from PWNX platform. I highly recommend you to register at PWNX for an upgrade in your skills as they only host real-life engagements case scenarios.
Register: https://bit.ly/3D57kSY
About PWNX: Train yourself while having fun on real vulnerable targets. This approach helps training practical red-teaming / pentesting skills on controlled and ready-to-hack environments, developed using publicly available products, or real-life engagements case scenarios.
If you like what I do, help me and consider buying me a coffee?
https://www.buymeacoffee.com/techmafia
Get involved with the community, join the discord server.
/ discord
00:00 - Intro
00:35 - Start of rustscan
05:10 - Start of gobuster to enumerate Files
06:45 - Comparing gobuster Files with Joomla CMS Github Files
07:40 - Enumerating Joomla with joomscanner for further enum.
10:50 - Taking a look at requests generated by joomscanner tool.
13:21 - Checking vulnerabilities detected by joomscanner
16:10 - All exploits fail, therefore manually finding exploits based on version number.
20:00 - Found similar updated exploit related with the CVE-2015-8562 exploit.
24:14 - Exploit fails; passing it to burpsuite to find what went wrong.
26:43 - Fixed object injection exploit script found
27:45 - Exploit works, modifying script to make it accept arguments.
29:31 - Got a reverse shell with netcat as www-data.
33:10 - curl & wget not available; transferring pspy to rusty machine using netcat
38:16 - Found cronjob script running by using pspy
40:17 - Modifying cronjob script to get reverse shell as pwnx user
42:30 - Last words :)