Hacker Fest: 2019 Walkthrough
Hacker Fest: 2019 is a part of series Hacker Fest. The author is Martin Haller. You can download this lab from Vulnhub.com
It’s an easy machine which can be exploited within 30 minutes. It’s a good machine for beginners.
Tools we will be using:
Network scanning and enumeration:
1. netdiscover
2. nmap
Exploitation and privilege escalation:
3. metasploit
Walkthrough
First we start by scanning the network using netdiscover.
PCS Systemtechnik GmbH is the name it shows for virtualbox.
Now we know the IP of the target machine, we will scan it using Nmap to look for any ports open or services running.
We see that on port 10000, Webmin 1.890 is running. Searching about it on google reveals that this particular version is vulnerable with a severity of 10. This exploit is also available on metasploit as mentioned on the site.
Now we shoot up metasploit and search for this exploit.
We will now assign RHOSTS, RPORTS, LHOST, and other things
After setting up all the things, it’s time to exploit. Webmin usually runs on root permissions, we verify our root access by passing the command id
