ALMETECK | VACCINE LAB REPORT

Exploitation Walkthrough

Target: 10.129.168.19

1. Enumeration:
   - nmap -sS -p- 10.129.168.19 -oG scope.txt
   - nmap -p[ports] -sV -sC 10.129.168.19 -oG versions.txt

2. Foothold:
   - Extracted backup.zip via FTP (Anonymous)
   - Cracked zip password using john: qwerty789
   - SQL Injection via dashboard.php using sqlmap --os-shell

3. Privilege Escalation:
   - Stabilized shell with pty spawn
   - Database credentials found: postgres / P@s5w0rd!
   - Accessed SSH with discovered credentials
   - Exploited sudo vi /etc/postgresql/11/main/pg_hba.conf to spawn root shell
            

Flags: [REDACTED]