HTB Linux Easy: Beep

Nmap scan

Initial Foothold

SSL issues when connecting

Solve by changing minimum TLS requirement in Firefox.

Login page

Exploit Elastix

Craft script from sources.

Setup nc listener and execute the script.

We get a shell as the Asterisk user:

Privilege Escalation

Sudo -l reveals a lot of binaries that can be executed with sudo.

We can use GTFObins to become root using Nmap.

User.txt

Root.txt

Pwned

Sources

• TLS
• Elastix exploit
• Elastix exploit v2
• Nmap priv esc