"Red" (TryHackMe) CTF Walkthrough

This is a CTF walkthrough of the box "Red" on TryHackMe. This challenge simulates a purple team (tabletop) exercise, where the offensive team (Red team) goes up against the defensive team (Blue team), I demonstrate in the walkthrough how to hack into the web server, gain a foothold, switch users, and escalate privileges up to the root user. There were a few surprises along the way to keep things interesting! Writeups are available on my github: https://github.com/CTF-Walkthroughs/C... Previous CTF tutorial videos and writeups available at: https://www.benreitz.com tags: enumerate, hash cracking, exploit, brute-force Chapters: 0:00 Intro 0:32 Opening Sequence 0:58 Initial Enumeration 3:40 Local File Inclusion 6:05 My dog cries and I leave for a sec... 6:45 Creating a password list with hashcat 12:23 brute force ssh with hydra 12:52 Initial foothold + flag1 16:10 Switch Users 17:00 thoughts on KoTH 18:55 User Red + flag2 20:46 privesc attempt #1 24:40 privesc attempt #2 27:50 privesc attempt #3 + flag3 29:39 Wrap-up