https://ahessmat.netlify.com/tags/privesc/Recent content in privesc on Asa's WebsiteHugo -- gohugo.ioen-usSun, 21 Feb 2021 03:38:18 +0000https://ahessmat.netlify.com/post/2021-02-hackthebox-writeup-delivery/Sun, 21 Feb 2021 03:38:18 +0000https://ahessmat.netlify.com/post/2021-02-hackthebox-writeup-delivery/Preamble This is a writeup of the Hack The Box (HTB) machine, Delivery. This machine is notable for its use of introducing attackers to a guided methodology of enumerating for a foothold. The privesc vector likewise leans on some tried-and-true search methods. Like many targets, we begin enumerating the machine for open ports and services. To do this, we use nmap with some particular options -sC: run default scripts, including some more intrusive ones -sV: probe open ports to determine service and version of said service.