Hack Me Please 1

Description ⤵️

💡 Hack Me Please: 1 ➡️

Difficulty: Easy

Description: An easy box totally made for OSCP. No bruteforce is required.

Aim: To get root shell

Let’s find the IP Address first »

IP : 10.0.2.27

Port Scan Results ➡️

OPEN PORTS >
80    HTTP
3306  mysql
33060 mysqlx

---

Web Enumeration ⤵️

/seeddms51x/seeddms-5.1.22/

With hid and try method I used seeddms as username & password →

+----------------+---------------------------------+-----------------------------+----------------------------------------------+

| Employee_id    | Employee_first_name             | Employee_last_name          | Employee_passwd 						                  |

+----------------+---------------------------------+-----------------------------+----------------------------------------------+

|           1    |          saket         			   |		saurav             	     |		Saket@#$1337    					                |

+-------------+------------------------------------+-----------------------------+----------------------------------------------+

I was now able to crack the password So I changed it → to admin

Now the updates credentials are →

Lets try it now →

I got the access →

Added the reverse shell →

Now it is time to load the shell file →

ROOT !!

---

Summery Notes →

💡

1. Tricky part was to find the /js/main.js file . After that the path becomes very easy .
2. And also the updation of password was new for me .
3. rest all was very easy peasy ..

---

If you have any questions or suggestions, please leave a comment below. Thank You !