Nov. 29, 2023, 12:16 p.m. | Pr3ach3r

System Weakness - Medium systemweakness.com

Equations can cause more headache than you think…

Topology “easy” machine

Introduction

Hi everyone, welcome to my journey into infosec. Today, we will explore a simple latex injection that results in an information disclosure, which will give us our first foothold. Afterwards, we will examine a gnuplot privilege escalation that will give us root privileges. Let’s get started!

Enumeration

Let’s begin our assessment using the nmap tool as usual:

# Nmap 7.94 scan initiated Wed Nov 15 15:33:39 2023 …

hacking hackthebox htb-writeup infosec-write-ups pentesting

Chief Information Security Officer (CISO)

@ CSIRO | Adelaide, SA, AU

Cyber Security Engineer - Clearance Required

@ Logistics Management Institute | Remote, United States

Security Engineer, Infrastructure

@ Meta | Bellevue, WA | Menlo Park, CA | Washington, DC | New York City

TS Senior Security Engineer

@ UL Solutions | Mumbai, Maharashtra, India

Security Operations Engineer

@ Fortis Games | Remote - United Kingdom

Senior Product Compliance Engineer

@ Element Biosciences | San Diego - Headquarters