HackTheBox - Writeup Builder [Retired]

Hackthebox

Neste writeup iremos explorar uma máquina linux de nível medium chamada Builder que aborda as seguintes vulnerabilidades e técnicas de exploração

• CVE-2024-23897 (Jenkins Arbitrary File Read)


• Sensitive Data Exposure

Recon e user flag

Iremos iniciar realizando uma varredura utilizando o nmap para visualizar as portas abertas em nosso alvo:

┌──(root㉿kali)-[/home/kali/hackthebox/machines-linux/builder]
└─# nmap -sV --open -Pn 10.129.220.88
Starting Nmap 7.93 ( https://nmap.org ) at 2024-02-13 12:15 EST
Nmap scan report for 10.129.220.88
Host is up (0.26s latency).
Not shown: 998 …

builder cve cve-2024 cve-2024-23897 cybersecurity data data exposure exposure file flag hackthebox home jenkins kali linux machines medium nmap recon root security sensitive sensitive data sensitive data exposure vulnerabilities writeup