🎫
Craft
  • Craft
    • Summary
  • Enumeration
    • TCP
    • UDP
    • Web Services
      • Source Code
      • Nikto
      • Dirb Extensions
      • Dirsearch
      • goBuster
      • Valuable Info
  • Exploitation
  • Priv Escalation
Powered by GitBook
On this page

Craft

This machine taught me how to do a client side attack that focused on macros being embedded into a .odt file. This something I was familiar with since I have done it before with Doc files however, due to my lack of knowledge I had to look up a tutorial lol. I also learned something new ehen elevating privileges, thinking logically will help a long way. If there is another user called apache, chances are its because htey are running a website of some sorts, and the website was indeed running as apache so overwriting files and executing them as apache allowed me to get system access.

NextSummary

Last updated 2 years ago

Page cover image