DNS Rebinding, XSS & 2FA SSH – Crossfit2 @ HackTheBox

We are solving Crossfit2, a 50-point OpenBSD machine on HackTheBox.

Topics:
• SQL Injection
• DNS Rebinding with Unbound
• XSS into Websockets
• Node Module Path
• OpenBSD Backups & Unveil
• Yubikey SSH 2FA

Join the discord: https://discord.gg/qdbJqXKPQ3 !

[ Timestamps ]
00:00 Intro
00:55 User
23:23 Root

[ Notes & Links ]
• https://www.hackthebox.eu/

[ Desktop ]
• https://github.com/xct/kali-clean

[ About ]
• https://vulndev.io
• https://twitter.com/xct_de
• https://github.com/xct
• https://www.patreon.com/xct

This is purely educational content – all practical work is done in environments that allow and encourage offensive security training.

source

by xct

windows server dns forwarder