Basic WebServer Configuration - Late Beyond Root [HackTheBox]
It's always a good idea to use a root shell on a box to make sure you understand how the box is configured. Depending on your skill and experience, the level of understanding may vary, but there's always something to learn.
In this video, I'll walk through the basic configuration of the webserver, starting from NGINX, through Gunicorn and its service, then to the source files it runs, ending up at a Python Flask application.
Full HackTheBox Late Writeup: https://0xdf.gitlab.io/2022/07/30/htb...
[00:00] Introduction
[01:30] NGINX configuration
[03:58] Gunicorn configuration
[05:34] Look at what Gunicorn is running
[08:23] Running Gunicorn manually
[10:10] Flask main.py analysis
[12:51] Late-specific application analysis
[17:10] Summary