Nov. 29, 2023, 12:16 p.m. | Pr3ach3r

System Weakness - Medium systemweakness.com

Equations can cause more headache than you think…

Topology “easy” machine

Introduction

Hi everyone, welcome to my journey into infosec. Today, we will explore a simple latex injection that results in an information disclosure, which will give us our first foothold. Afterwards, we will examine a gnuplot privilege escalation that will give us root privileges. Let’s get started!

Enumeration

Let’s begin our assessment using the nmap tool as usual:

# Nmap 7.94 scan initiated Wed Nov 15 15:33:39 2023 …

hacking hackthebox htb-writeup infosec-write-ups pentesting

CyberSOC Technical Lead

@ Integrity360 | Sandyford, Dublin, Ireland

Cyber Security Strategy Consultant

@ Capco | New York City

Cyber Security Senior Consultant

@ Capco | Chicago, IL

Sr. Product Manager

@ MixMode | Remote, US

Corporate Intern - Information Security (Year Round)

@ Associated Bank | US WI Remote

Senior Offensive Security Engineer

@ CoStar Group | US-DC Washington, DC