Tar-Wildcard

Summary Skynet is the eighth machine of the Road to eJPTv2 series and one of the most complete in the path. It combines SMB enumeration, brute force against a webmail, exploitation of a CMS with Remote File Inclusion, and a classic privilege escalation based on tar wildcard injection in a cron job. A chained attack flow where each phase depends on the previous one — exactly the kind of reasoning the eJPT evaluates. ...