Walktrhough: BankSmarter
Scenario You are a senior operator on the Hack Smarter Red Team, tasked with a penetration test against a standalone Linux server. Your objective is to gain initial access and escalate privileges to root, emulating a worst-case scenario where a threat actor successfully compromises a critical asset. You have been given the IP address of […]
Walktrhough: DropFile
Objective Conduct an internal penetration test of a Linux server, identify vulnerabilities, obtain initial access, and escalate privileges to root. Assessment Summary The target exposed SSH (TCP/22) and an HTTP file-sharing application (TCP/80). Virtual-host enumeration identified a development site containing the application’s source code. Source review revealed an insecure SHA-256 secret-prefix signature construction and a […]