In this lab, we exploit an authenticated remote code execution vulnerability in the Nagios XI monitoring software. The application is misconfigured to run with root privileges, allowing us to escalate immediately to root once the vulnerability is exploited.

In this lab, we will exploit a web application to discover SSH credentials and escalate privileges by leveraging a vulnerable SUID binary to gain root access. This exercise simulates a real-world scenario involving directory enumeration, SSH exploitation, and privilege escalation using an available exploit.

Active is an Easy difficulty Windows machine from Hack The Box that serves as a great introduction to Active Directory attacks. The challenge highlights the risks of legacy configurations in domain environments. In this walkthrough, we start by enumerating SMB shares to discover a classic Group Policy Preferences (GPP) vulnerability. After retrieving credentials, we leverage Kerberoasting to escalate privileges and gain full control over the Domain Controller.

My first Vulnhub machine: A step-by-step walkthrough for Droopy v0.2 — reconnaissance, foothold with Drupalgeddon2, and root via kernel exploit.