Linux Shared Object Files - Shibboleth Beyond Root [HackTheBox]

Published: 02 April 2022
on channel: 0xdf
924
49

Reversing a msfvenon generated elf shared object, writing a elf .so file, and then reversing it as well. All within the context of CVE-2021-27928 as used on the Shibboleth box.

Full Shibboleth Post: https://0xdf.gitlab.io/2022/04/02/htb...

[00:00] Intro
[01:16] so file, generating with msfvenom and reversing with Ghidra
[05:04] Identifying SYSCALLs to understand what's happening
[07:40] Writing my own shared object with a constructor and simple id to file payload
[13:45] Testing first so payload on Shibboleth
[15:34] Updating payload to set permissions so I can read the output
[16:49] Updating payload to create a SUID bash
[18:20] Looking at my shared object in Ghidra
[19:40] Summary


On this page of the site you can watch the video online Linux Shared Object Files - Shibboleth Beyond Root [HackTheBox] with a duration of hours minute second in good quality, which was uploaded by the user 0xdf 02 April 2022, share the link with friends and acquaintances, this video has already been watched 924 times on youtube and it was liked by 49 viewers. Enjoy your viewing!