HTB - Help Writeup - no Metasploit
Summary The machine is running HelpDeskZ version 1.0.2 on port 80 (HTTP), which is vulnerable to an Arbitrary File Upload issue. This vulnerability was exploited to obtain a reverse shell as the help user. Enumeration of the kernel version revealed 4.4.0-116-generic , which is affected by a privilege escalation vulnerability, CVE-2017-16995. Exploitation of CVE-2017-16995 was successful,…
The HelpDeskZ web application, version 1.0.2, was discovered running on port 80 of a machine accessible at the domain name "help.htb". An arbitrary file upload vulnerability was identified, which was subsequently exploited to gain a reverse shell as the "help" user. Subsequent enumeration revealed that the machine's kernel version 4.4.0-116-generic was susceptible to another privilege escalation vulnerability, CVE-2017-16995.
Successful exploitation of this vulnerability resulted in the acquisition of a root shell. The report recommends updating HelpDeskZ to the latest version and applying kernel updates, or considering alternative systems.
Written by urgent.news from Dev.to's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
