Internal Pentest: Five Boxes, Five Ways In

Thu, 04 May 2023 00:00:00 +0000

This is a retrospective on an internal penetration test I ran as the final for a CMIS offensive-security course. The scope was five intentionally-vulnerable hosts on one flat network, assessed end to end from enumeration through root. On four of the five boxes, the way in was a configuration problem, not a software flaw. Each section is the shortest honest path to root/admin, then the fix that would have stopped it.

Writeups on Rylan Puderbaugh

Internal Pentest: Five Boxes, Five Ways In