HackTheBox Sau Writeup htb-sau

HackTheBox Sau Writeup。该文记录 Hack The Box 机器 Sau 的完整解题过程，目标为简单 Linux 靶机，涵盖信息收集、初始突破、权限提升与关键利用链。本文介绍了对名为"Sau"的Linux系统进行信息收集的过程。 This article details the information gathering process for a Linux system named "Sau." During the scanning phase, three open ports were identified: port 22 (SSH service), port 53 (domain name service), and port 55555 (an unknown service). Notably, the service running on port 55555 is request-baskets version 1.2.1, which is associated with CVE-2023-27163. It is recommended to examine port 80 for further information. Additionally, leveraging CVE-2023-26604 for privilege escalation is a key step in the process.

[+] found 3 open port
--------------------------------------------------------------------------------
Port 22     | Service: ssh             | Banner: SSH-2.0-OpenSSH_8.2p1 Ubuntu-4ubuntu0.7
Port 53     | Service: domain          | Banner: (no banner)
Port 55555  | Service: Unknown         | Banner: (no banner)
--------------------------------------------------------------------------------

[+] found 3 open port
--------------------------------------------------------------------------------
Port 22     | Service: ssh             | Banner: SSH-2.0-OpenSSH_8.2p1 Ubuntu-4ubuntu0.7
Port 53     | Service: domain          | Banner: (no banner)
Port 55555  | Service: Unknown         | Banner: (no banner)
--------------------------------------------------------------------------------