MISDIRECTION: 1 Walkthrough

The purpose of this machine is to grant OSCP students further develop, strengthen, and practice their methodology for the exam.

This works better with VirtualBox rather than VMware

Misdirection: 1

Enumeration

Let’s enumerate the port 80,8080

• 80

• 8080

there is a webshell @ /debug/

Privilege Escalation

let’s get into the user → brexit

seems interesting

Let’s try to get root using the lxd group,

https://www.hackingarticles.in/lxd-privilege-escalation/#:~:text=A%20member%20of%20the%20local,with%20the%20LXD%20snap%20package.

https://techoverflow.net/2018/05/03/how-to-fix-lxd-failed-container-creation-no-storage-pool-found-please-create-a-new-storage-pool/

Photo by JC Gellidon on Unsplash