Trick

Trick is a linux machine

IMG_256

IMG_257

Port 53 seems interesting

IMG_258

Zone transfer ?

IMG_259

IMG_260

IMG_261

https://beaglesecurity.com/blog/vulnerability/dns-zone-transfer.html

IMG_262

IMG_263

IMG_264

Check if vulnerable to sql injection

IMG_265

IMG_266

IMG_267

IMG_268

IMG_269

IMG_270

IMG_271

IMG_272

Tried alot , this one works

IMG_273

IMG_274

Looks like we can read his ssh key :D

IMG_275

Link : https://youssef-ichioui.medium.com/abusing-fail2ban-misconfiguration-to-escalate-privileges-on-linux-826ad0cdafb7

https://www.hackthebox.com/achievement/machine/336799/477