Let’s discuss LinkVortex from hackthebox
- dump .git
- get creds
- login as admin
- CVE-2023-40028
- read config, to find user password
- sudo privilege
how did you find creds in the .git
dump the .git using git-dumper and enumerate tthe files.
1 Like