Devel

Devel HTB 2023 Walkthrough. Devel is relatively simple Windows machine and demonstrates the security risks associated with some default program configurations.

Scanning

Initial scan reveals, we have 2x ports open. Port 80 and port 21.

  • Port 80 : we have IIS server

  • Port 21: Anonymous login is allowed

Web Enumeration

Visiting the site, we get the default IIS page.

Nothing appears with dirbusting as well.

FTP Enumeration

Getting FTP access is easy and we can see default IIS files in the ftp directory. Which means we can directly upload files to web directory and we can try local file inclusion.

Exploitation

So, we can simply upload an aspx shell and gain access.

Generate a shell

Create a reverse non staged backdoor with msfvenom

Initial Access

upload the shell

Now, open a netcat listener

visit the shell from the browser and we will get the shell.

Privilege Escalation

Lets first get the system info.

  • Its windows 7 build 7600 which is very old

  • No hotfixes are applied

  • Machine is x86

Searcing Google for the build, we do get an exploit.

Download the exploit

Now compile it.

Now run a python server and download it on the box.

We could have used powershell to download the file as well.

Now run it and we will become the root

PreviousForestNextMetasploitable 2

Last updated