Next, we visit the HTTP service running on port 80:
With administrative access, we can now explore the application's functionality. Upon reviewing the dashboard, we notice a " Upload File" feature. This feature can potentially be used to execute arbitrary code on the server. hack fish.io
Hack The Box is a popular online platform that offers a variety of virtual machines (VMs) for cybersecurity enthusiasts to practice their hacking skills. One of the boxes available on the platform is Fish.io, a Linux-based VM that simulates a real-world hacking scenario. In this walkthrough, we'll explore the steps to compromise the Fish.io box and gain root access. Next, we visit the HTTP service running on
nmap -sV -p- 10.10.10.15 The scan reveals that ports 22 (SSH), 80 (HTTP), and 8080 (HTTP) are open. We can now focus on exploring these services further. Hack The Box is a popular online platform
cat ~fish/config The file contains a password for the root user. We can now switch to the root user and gain full access to the system:
sudo -l We can leverage this configuration to gain root access:
