Bizness - Hack The Box

01:25 Web Enumeration
03:20 Initial Foothold
05:20 Reverse Shell
07:00 Linpeas
11:20 Writeable Executable Enum
13:25 Internal web port
14:00 Further Ofbiz enumeration
17:00 Password String
18:20 Interesting Data Files
22:30 Enumerating Derby
25:50 Hash Found
28:50 HashiLib enumeration
33:25 r00t
Vulnerability Analysis: www.vicarius.i...
PoC: github.com/jak...