Offsec Proving Grounds Walkthrough - BlackGate

This is a walkthrough of Offsec Proving Grounds machine "BlackGate". It is rated as hard but there are several ways to take advantage of this machine (likely not intended by Offsec). We start by exploiting Redis and privesc using misconfigured SUID setting BUT there are some things you will need to do to be able to make the leap to root, it isn't straightforward! I also give you some alternative privesc methods you can try! ***SPOILER***Walkthrough of the machine called "Blackgate" in the Offsec Proving Grounds...don't watch unless you want help getting through the machine.

Links used in walkthrough:
https://github.com/n0b0dyCN/redis-rogue-server
https://github.com/joeammond/CVE-2021-4034/blob/main/CVE-2021-4034.py

Видео Offsec Proving Grounds Walkthrough - BlackGate канала nPmHacks