BOOK THIS SPACE FOR AD
ARTICLE ADHello everyone! Welcome to Day 20 of our #CyberQuest1095 challenge. Today was packed with learning and achievements. Let me walk you through what I did.
I kicked off my day with some Rust programming. Rust is a systems programming language that focuses on speed and safety. Today, I wrote the main working code for a http web server. This server will handle incoming web requests and serve responses. The core functionality is done, and now I just need to add some additional features.I’ll be adding this web server to my GitHub profile tomorrow!!
Next up was the Intentions box, which I started a couple of days ago. Today, I managed to gain www-data shell access by exploiting a vulnerability in the Imagick PHP library. Imagick is a popular library for image processing in PHP, but like any software, it can have its weaknesses. I’ll finish this box tomorrow since my allotted machine time ran out for today.
After that, I spent some time organizing my notes. I’ve been using Obsidian, a fantastic tool for managing and linking notes. Its backlink feature allows me to connect related ideas and notes effortlessly, making it easier to track my progress and revisit important information.
Finally, my brother Sambit and I started working on another box called Cascade. This box is focused on Active Directory, a service used by many organizations to manage their networks. We found Cascade to be relatively easy because it mainly involved enumeration, which is the process of gathering information about a network.
Here are some of the highlights:
We gained access to four user accounts.We used the dnSpy tool to disassemble and analyze code.We cracked an AES hashFull Blog URL: https://medium.com/@d3athcod3/cascade-hackthebox-walkthrough-active-directory-572045c6dfc5
It was a fun and productive session!
That’s it for today! It was a day full of coding, hacking, and learning. Thanks for following along with our #CyberQuest1095 challenge.
Happy Hacking :)