HackTheBox: Frolic Walkthrough

Enumeration

Appears to be a directory listing…
How not to program your web apps
The password was ‘password’

The Initial Foothold

If you have excellent vision, you might be able to read this.

Internal Enumeration and Getting Root

  1. The length of the buffer.
  2. The address in memory of the system() function
  3. The address in memory of the exit() function
  4. The disk address of the library used by the program.
  5. The disk address of /bin/sh inside the previously mentioned library.

--

--

Get the Medium app

A button that says 'Download on the App Store', and if clicked it will lead you to the iOS App store
A button that says 'Get it on, Google Play', and if clicked it will lead you to the Google Play store
Matt Johnson

Matt Johnson

Freelance cybersecurity consultant based in Düsseldorf, Germany.