HackTheBox - Keeper

Video Description

00:00 - Introduction 01:00 - Start of box 02:00 - Checking out Request Tracker, login with default creds 06:30 - Finding a password in the users description on RT 09:00 - Googling how to get keepass passwords from memory 11:00 - Talking about how this exploit actually works, its because of the textbox! 15:00 - Using strings on the dump file to show how the password looks in memory 20:30 - Searching the keepass, finding a putty private key 23:00 - Converting the putty key to openssh 26:00 - Grabbing root