Uploaded July 2023 | Updated September 2026, 7 hours ago

---

In this video, Tib3rius solves the easy rated "MoneyBox" from Proving Grounds.

0:00 - Intro
0:20 - Starting Moneybox
3:12 - Investigating the anonymous FTP server.
5:57 - Investigating the web server.
7:44 - Finding the "secret" directory.
8:31 - Fixing the VPN issue and downloading the JPG from the FTP server.
9:49 - Using the secret key and stegseek to extract the hidden file.
12:04 - Using hydra to brute-force the SSH password for the "renu" user.
13:29 - Gaining a shell with SSH and getting the first flag.
14:30 - Finding references to lily and SSH keys in the bash history file.
16:51 - Re-using renu's private SSH key to log in as lily.
18:03 - Finding an easy privesc using sudo and perl.
19:59 - Gaining a root shell with sudo!
20:39 - Outro

Twitter: twitter.com/0xTib3rius
Twitch: twitch.tv/0xTib3rius
Courses: courses.tib3rius.com
Udemy: udemy.com/user/tib3rius
Discord: discord.com/invite/4qrvKMh
LinkedIn: linkedin.com/in/tib3rius
Facebook: facebook.com/0xTib3rius