Road to CREST/CRT: HTB BountyHunter

It's been a long time since our last meeting, so we’re excited to reconnect with you. In this session, we will prepare for the CREST Certified Tester (CRT) exam by solving Hack The Box (HTB) machines in the CREST/CRT tracks.

One of the machines we will tackle is BountyHunter, which features a straightforward XXE vulnerability in a webpage that allows access to files on the host. This vulnerability can be exploited to retrieve user information and a password in a PHP script, which can then be used to gain SSH access to the host. For privilege escalation, we'll explore a ticket validation script running as root that is susceptible to Python eval injection.

Join us to sharpen your skills and advance your knowledge in preparation for the CREST/CRT exam.