Cross-site WebSocket hijacking (CSWSH) | RC4 encryption

Cross-site WebSocket hijacking (CSWSH) | RC4 encryption

?? Cybersecurity Journey Update: Inkplot Challenge Completed on HackMyVM!

?? Watch the video here: Link to Video

I took on the Inkplot challenge, not as a tutorial but as a practice project to deepen my cybersecurity skills.

Here are the key steps I took:

  • Uncovered intriguing chat details, like Leila's interruption of Alice sharing MD5 hash with Bob.
  • Wrote a brute force script to recover the hash and password, granting SSH access as user Leila.
  • Discovered 'Leila' can execute script as 'Pauline'. Explored RC4 encryption vulnerability for access.
  • Leveraged RC4 weakness to access Pauline's id_rsa key, then found the 'admin' group and access to 'system-sleep' folder.
  • Designed script for SUID permission to bash shell, achieving ROOT access and completing the 'inkplot' machine!

Learning and practicing concepts in action! ??????

#Cybersecurity #hackmyvm #infosec #informationsecurity #ethicalhacking #security

要查看或添加评论,请登录

社区洞察

其他会员也浏览了