Solving SickOs 1.2 (Vulnhub) Walkthrough

Be better than yesterday

OSCE|OSCP|CREST

Tackle everything that is interesting and fun. Learning never stops. Be better than yesterday!

This video shows how to solve the vulnerable machine SickOs: 1.2

SickOs: 1.2 is a recommended vulnerable machine hosted on Vulnhub for Offensive Security OSCP preparation

SickOs: 1.2 vulnerable machine can be downloaded from https://www.vulnhub.com/entry/sickos-12,144/

Gemini Security Awesome Hacking T-Shirts - Support the channel:
https://www.redbubble.com/people/GeminiSecurity/shop?asc=u

Key Concepts:
- Enumerating software versions with NMap and Burp Suite
- Enumerating HTTP Methods with NMap Scripts (NSE)
- Exploiting Insecure WebDAV Implementation via PUT file upload
- Exploring Outbound Ports to bypass Outbound Network Restrictions
- Exploiting Outdated chkrootkit software for Privilege Escalation

Timestamp
00:00 Intro
00:11 Obtaining Initial Foothold
06:45 Discovered WebDAV and PUT Method Available
06:56 Exploiting Misconfigured WebDAV to Upload PHP File via PUT
14:44 Exploring Outbound Ports for Reverse Shell
17:24 Initial Foothold Obtained
17:35 Privilege Escalation to Root

Видео Solving SickOs 1.2 (Vulnhub) Walkthrough канала Gemini Cyber Security