HackTheBox: Precious
Enumeration 1 export target=10.129.48.66 Port Scanning 1 rustscan -a $target --ulimit 10000 -g 1 nmap -Pn -sC -sV -n -p22,80 -T5 $target Add it to the etc/hosts Web Application Smells like SSRF or LFI, test it out. Setup a server: 1 python3 -m http.server 8000 Initial Foothold Server uses Ruby and pdfkit to convert to PDFs. pdfkit 0.8.6 has a command injection vulnerability and has a public exploit (https://github.com/UNICORDev/exploit-CVE-2022-25765) ...