MOTD
OFFSEC - Proving Grounds - FOWSNIFF
·2734 words·13 mins
OFFSEC PG PRACTICE
POP3
HYDRA
MOTD
GitHub credentials enable POP3 access to retrieve an SSH password. Hydra finds valid credentials for SSH access. A writable cube.sh used by the MOTD is abused to gain root.