SAR1 VULHUB WALKTHROUGH
SAR1 (Walkthrough) This Box Is From Vulhub You Can Download It From Link .This Box is like OSCP box which i beleive is .I pwned this box using LFI leads to RCE. Breaching Process Finding IP Netdiscover Enumeration Browsing HTTP service Nmap scan Enumerating directory using nikto and dirb Found robots.txt and other useful directory Enumerating sar2HTML Exploitation using searchsploit for sar2HTML found RCE Injecting php code using (wget) Got reverse shell using NC Privilege Escalation Found crontab execute shell in 5 min. Add the sudoers permission for www-data. Got root permission Let's Breach Using netdiscover i found the box ip address.The ip address was 192.168.248.136 Then i scan the IP using nmap The command is nmap -sSVC -A 192.168.248.136 | tee nmap.txt Here the scan shows only 80 port which was default page of apache There was no thing to see so,i need to dig d...
