THM: Athena
Linux machine chaining SMB enumeration, new-line command injection on an in-development router panel, cron job abuse, and a patched Diamorphine LKM rootkit for root.
Linux machine chaining SMB enumeration, new-line command injection on an in-development router panel, cron job abuse, and a patched Diamorphine LKM rootkit for root.
Linux box that starts with an exposed PHP web shell, pivots through sudo-based lateral movement, and finishes with cron-driven privilege escalation.