MADNESS TryHackMe Walkthrough 🕵️‍♂️: Steganography, Hidden Directories & Privilege Escalation

Live walkthrough time... here's Madness from TryHackMe. It's got steganography, hidden directories, and privilege escalation. Learn from my mistakes in this video, thanks for watching!

FREE $5 TryHackMe Credit - https://go.mrash.co/tryhackme

#tryhackme • #hacking • #cybersec

- - -

Notes - https://mrash.co/hacknotes
Room - https://tryhackme.com/room/madness
Website, Blog, Newsletter & More - https://go.mrash.co/links
Music - https://go.mrash.co/music

Links
- https://en.wikipedia.org/wiki/List_of_file_signatures
- https://github.com/RickdeJager/stegseek
- https://github.com/carlospolop/PEASS-ng/tree/master/linPEAS
- https://www.exploit-db.com/exploits/44298
- https://www.exploit-db.com/exploits/40759
- https://book.hacktricks.xyz/linux-hardening/privilege-escalation#sudo-version
- https://www.armourinfosec.com/linux-privilege-escalation-by-exploiting-cronjobs/
- https://vk9-sec.com/exploiting-the-cron-jobs-misconfigurations-privilege-escalation/
- https://gtfobins.github.io/gtfobins/screen/

- - -

00:00 - Intro
00:25 - Start Here
01:42 - Port Discovery (rustscan)
02:01 - Port 80 Anlaysis
02:59 - Image Forensics (file, strings, steghide, stegseek, hexedit)
10:34 - PrivEsc Attempt 1
12:45 - PrivEsc Attempt 2
13:57 - PrivEsc Attempt 3
16:13 - Outro

- - -

Recommended Software

$60 off Speechify Premium - https://go.mrash.co/speechify
Brain Music $1 Pro - https://go.mrash.co/brain.fm
Managed Web Hosting 20% Off - https://go.mrash.co/cloudways
Cheap Domain Names - https://go.mrash.co/namecheap
Automated Email Marketing - https://go.mrash.co/gist
Blog Autopilot - https://go.mrash.co/lettr
Screenshot & Record Everything - https://go.mrash.co/cloudapp
Google's Pro Suite - https://go.mrash.co/googlework

- - -

My Hardware

Asus Z690M+ MoBo - https://go.mrash.co/Z690M
Cooler Master CPU Cooler - https://go.mrash.co/ML120L
Corsair 2TB M.2 SSD - https://go.mrash.co/MP600
Corsair DDR4 32GB RAM - https://go.mrash.co/CMK32GX
Gigabyte 850W PSU - https://go.mrash.co/GP-AP850GM
Intel i7 12700K CPU - https://go.mrash.co/12700K
Intel WiFi 6 AX210 - https://go.mrash.co/AX210
MSI RTX 3070 Ti - https://go.mrash.co/3070Ti
SilverStone Case Fans - https://go.mrash.co/AB120R

Razer Blade i7 Laptop - https://go.mrash.co/RAZRLP2021
Samsung Tab S6 Lite - https://go.mrash.co/s6lite

PRISM+ 34" QLED - https://go.mrash.co/XQ340PRO
Samsung 34" QLED - https://go.mrash.co/3KUWQHD

Bose QC35 II Headphones - https://go.mrash.co/qc35ii
Corsair Harpoon Mouse - https://go.mrash.co/harpoon
Cooler Master Keyboard - https://go.mrash.co/SK622

Mic Arm - https://go.mrash.co/nmicarm

- - -

tryhackme ethicalhacking cybersecurity cybersec hacking informationsecurity pentesting ethicalhacking cybersecuritytraining learnhacking tryhackmecommunity tryhackmerooms cyberwarriors cyberattack cyberdefense cyberthreats cybercrime cyberawareness cyberhygiene cybersavvy cybereducation cyberskills linuxcommunity linuxusers linuxenthusiasts linuxmastery cyberninjas ninjaskills linuxsecrets hiddenfiles shellscripting capturetheflag adventofcyber attacksurfacereduction securityposture networksecurity cybersecurityprofessional phishing dosattacks vulnerabilityexploitation firewall intrusiondetection patchmanagement cyberdefence cyberresilience cybercrime informationsecurity cyberthreats cyberattack cyberprotect

- - -

Subs: 1,361
Hours: 4

- - -

All of my opinions in this video are my own, I was not paid to make this video. Whenever there is a link in any of my videos, if there is an affiliate program available, it's safe to assume that you are clicking on an affiliate link. Please check my website for any associated bonus I may be offering, for supporting me or ask in the comments below.