Wilder on Nostr: #87 OpenAdmin (HackTheBox) (Easy) No Luck With c99. This time we find a vulnerable ...
#87 OpenAdmin (HackTheBox) (Easy) No Luck With c99.
This time we find a vulnerable version of OpenNetAdmin and use this to upload a webshell.
Once we find credentials for the database, we find they are reused for SSH.
After abusing an internal application to give the SSH key of another user we gain root via a sudo misconfiguration.
https://www.youtube.com/watch?v=pr6xaO-ZF2oPublished at
2026-09-16 20:10:00 UTCEvent JSON
{
"id": "371758c4aac39ab1f3ff86da9307f788dd9aa058ce756ae37399ac457697b4cd",
"pubkey": "a1ac164b86a25ca03ec8f9f65c682c7bb94e0d18580ab5dd2bdf2942fd357180",
"created_at": 1789589400,
"kind": 1,
"tags": [],
"content": "#87 OpenAdmin (HackTheBox) (Easy) No Luck With c99.\nThis time we find a vulnerable version of OpenNetAdmin and use this to upload a webshell. \nOnce we find credentials for the database, we find they are reused for SSH. \nAfter abusing an internal application to give the SSH key of another user we gain root via a sudo misconfiguration.\nhttps://www.youtube.com/watch?v=pr6xaO-ZF2o",
"sig": "4041330820730d86b7cd51df69c417e853bceb2c426c33ec732534b6ac209ac9f2144b39c20fc244c2f6bf6c115deb0122488e7456d074c15dd40ad99a524f03"
}
