MADNESS tryhackme writeup

Live walkthrough time... here's Madness from TryHackMe. It's got steganography, hidden directories, and privilege escalation. Learn from my mistakes in this video, thanks for watching! FREE $5 TryHackMe Credit - https://go.mrash.co/tryhackme #tryhackme • #hacking • #cybersec - - - Notes - https://mrash.co/hacknotes Room - https://tryhackme.com/room/madness Website, Blog, Newsletter & More - https://go.mrash.co/links Music - https://go.mrash.co/music Links - https://en.wikipedia.org/wiki/List_of_file_signatures - https://github.com/RickdeJager/stegseek - https://github.com/carlospolop/PEASS-ng/tree/master/linPEAS - https://www.exploit-db.com/exploits/44298 - https://www.exploit-db.com/exploits/40759 - https://book.hacktricks.xyz/linux-hardening/privilege-escalation#sudo-version - https://www.armourinfosec.com/linux-privilege-escalation-by-exploiting-cronjobs/ - https://vk9-sec.com/exploiting-the-cron-jobs-misconfigurations-privilege-escalation/ - https://gtfobins.github.io/gtfobins/screen/ - - - 00:00 - Intro 00:25 - Start Here 01:42 - Port Discovery (rustscan) 02:01 - Port 80 Anlaysis 02:59 - Image Forensics (file, strings, steghide, stegseek, hexedit) 10:34 - PrivEsc Attempt 1 12:45 - PrivEsc Attempt 2 13:57 - PrivEsc Attempt 3 16:13 - Outro - - - Recommended Software $60 off Speechify Premium - https://go.mrash.co/speechify Brain Music $1 Pro - https://go.mrash.co/brain.fm Managed Web Hosting 20% Off - https://go.mrash.co/cloudways Cheap Domain Names - https://go.mrash.co/namecheap Automated Email Marketing - https://go.mrash.co/gist Blog Autopilot - https://go.mrash.co/lettr Screenshot & Record Everything - https://go.mrash.co/cloudapp Google's Pro Suite - https://go.mrash.co/googlework - - - My Hardware Asus Z690M+ MoBo - https://go.mrash.co/Z690M Cooler Master CPU Cooler - https://go.mrash.co/ML120L Corsair 2TB M.2 SSD - https://go.mrash.co/MP600 Corsair DDR4 32GB RAM - https://go.mrash.co/CMK32GX Gigabyte 850W PSU - https://go.mrash.co/GP-AP850GM Intel i7 12700K CPU - https://go.mrash.co/12700K Intel WiFi 6 AX210 - https://go.mrash.co/AX210 MSI RTX 3070 Ti - https://go.mrash.co/3070Ti SilverStone Case Fans - https://go.mrash.co/AB120R Razer Blade i7 Laptop - https://go.mrash.co/RAZRLP2021 Samsung Tab S6 Lite - https://go.mrash.co/s6lite PRISM+ 34" QLED - https://go.mrash.co/XQ340PRO Samsung 34" QLED - https://go.mrash.co/3KUWQHD Bose QC35 II Headphones - https://go.mrash.co/qc35ii Corsair Harpoon Mouse - https://go.mrash.co/harpoon Cooler Master Keyboard - https://go.mrash.co/SK622 Mic Arm - https://go.mrash.co/nmicarm - - - tryhackme ethicalhacking cybersecurity cybersec hacking informationsecurity pentesting ethicalhacking cybersecuritytraining learnhacking tryhackmecommunity tryhackmerooms cyberwarriors cyberattack cyberdefense cyberthreats cybercrime cyberawareness cyberhygiene cybersavvy cybereducation cyberskills linuxcommunity linuxusers linuxenthusiasts linuxmastery cyberninjas ninjaskills linuxsecrets hiddenfiles shellscripting capturetheflag adventofcyber attacksurfacereduction securityposture networksecurity cybersecurityprofessional phishing dosattacks vulnerabilityexploitation firewall intrusiondetection patchmanagement cyberdefence cyberresilience cybercrime informationsecurity cyberthreats cyberattack cyberprotect - - - Subs: 1,361 Hours: 4 - - - All of my opinions in this video are my own, I was not paid to make this video. Whenever there is a link in any of my videos, if there is an affiliate program available, it's safe to assume that you are clicking on an affiliate link. Please check my website for any associated bonus I may be offering, for supporting me or ask in the comments below.