Arjun Aryal – Medium

Mar 14

Paper-Hack The Box

Scope of the work The scope of this machine is to retrieve the two flags as proof of exploitation. user.txt root.txt HackTheBox has provided the following scope allowances: Any tools or techniques are permitted in this engagement, however, we ask that you attempt manual exploitation first Locate and report all vulnerabilities found Submit…

Paper

8 min read

Mar 13

Dirty Pipe- Worst Linux Kernel Flaw

A Linux Kernel vulnerability named Dirty Pipe was discovered lately by security researcher Max Kellermann. Designated as CVE-2022–0847, when the flaw is exploited, it allows a local privilege escalation that allows a local attacker to bypass any file permission, and write arbitrary data to any file under certain conditions. Dirty…

Dirty Pipe

3 min read

Jan 4

Timing

Nmap └─$ sudo nmap -sC -sV -oA nmap/timing 10.10.11.135 [sudo] password for arjun: Starting Nmap 7.91 ( https://nmap.org ) at 2021-12-16 03:57 EST Nmap scan report for 10.10.11.135 Host is up (0.075s latency)…

Timing

13 min read

Dec 20, 2021

Shibboleth Write Up — Hack the box

Nmap ┌──(arjun㉿kali)-[~/Desktop/htb/machines/shibboleth] └─$ cat nmap/shibboleth.nmap # Nmap 7.91 scan initiated Sun Nov 21 00:52:50 2021 as: nmap -sS -sC -sV -oA nmap/shibboleth 10.10.11.124 Nmap scan report for 10.10.11.124 Host is up (0.55s latency). Not shown: 999 closed ports PORT STATE SERVICE VERSION 80/tcp open http Apache httpd 2.4.41 |_http-server-header: Apache/2.4.41 (Ubuntu) |_http-title: Did…

Shibboleth

8 min read

Dec 15, 2021

Write up: Backdoor -HTB

Nmap: sudo nmap -sC -sV -oA nmap/backdoor 10.10.11.125 [sudo] password for arjun: Starting Nmap 7.91 ( https://nmap.org ) at 2021-12-15 04:35 EST Nmap scan report for 10.10.11.125 Host is up (0.078s latency). Not shown: 998 closed ports PORT STATE SERVICE VERSION 22/tcp open ssh OpenSSH 8.2p1 Ubuntu 4ubuntu0.3 (Ubuntu…

Hack The Box Walkthrough

8 min read