Tag Samba

Hack The Box: Fries Machine Walkthrough – Hard Difficulty

Just wrapped up another Hack The Box machine: Fries (Hard).

TThis machine provided a realistic attack path that started with source code review in Gitea, where leaked credentials in a Git commit led to authenticated PostgreSQL RCE through pgAdmin. From there, I pivoted through the internal Docker network using Ligolo-ng, abused an exposed NFS share and debugfs to gain host access, then exploited PWM configuration weaknesses to capture LDAP credentials. The final stage involved Active Directory enumeration and AD CS (ESC6/ESC7) abuse to obtain an administrator certificate and compromise the domain. A great lab for practising web exploitation, Docker security, Linux privilege escalation, internal pivoting, and Active Directory attacks.

#HackTheBox #HTB #CyberSecurity #PenetrationTesting #RedTeam #ActiveDirectory #ADCS #Docker #Ligolo #PostgreSQL #Gitea #EthicalHacking #Writeup #CTF

Hack The Box: Abducted Machine Walkthrough – Medium Difficulty

Recently completed the Abducted machine from Hack The Box, a Medium-difficulty challenge that combined SMB enumeration, Samba exploitation, credential discovery, lateral movement, and Linux privilege escalation techniques.

The path to user access involved enumerating SMB shares and anonymous RPC services before exploiting a vulnerable Samba printer configuration to gain an initial foothold. Further enumeration revealed backup credentials stored within an Rclone configuration file, which were decrypted and reused to obtain access as a legitimate user. From there, a misconfigured Samba share enabled lateral movement to another account, ultimately leading to a systemd-based privilege escalation path and root access.

This machine provided valuable practice in chaining multiple weaknesses together and demonstrated how exposed credentials, insecure service configurations, and share misconfigurations can collectively lead to full system compromise.

Key takeaways:
✅ SMB and RPC enumeration can reveal valuable attack paths
✅ Exposed credentials often provide opportunities for lateral movement
✅ Misconfigured Samba shares can introduce serious security risks
✅ Service configuration weaknesses can lead to privilege escalation
✅ Small misconfigurations can be chained into complete system compromise

#CyberSecurity #EthicalHacking #PenetrationTesting #PrivilegeEscalation #RedTeam #LinuxSecurity #SMB #Samba #CTF #HackTheBox #InfoSec #SecurityResearch