ICMP Walkthrough — OffSec Lab (Privilege Escalation via hping3) About this Lab This lab emphasizes systematic network and web service enumeration to identify attack surfaces and misconfigurations …

InfoSecWriteUps' platform is  dedicated to providing insights and resources for cybersecurity professionals and enthusiasts. Through articles, tutorials, and security research, InfoSecWriteUps offers insights into cybersecurity vulnerabilities, attack techniques, and defense strategies. Readers can learn about penetration testing, threat intelligence, and incident response to enhance their cybersecurity knowledge and skills.

InfoSec Write-ups

A walkthrough of an OffSec lab machine called ICMP, covering the full attack chain from network enumeration with Nmap to initial access via an unauthenticated RCE vulnerability in Monitorr 1.7.6m, credential harvesting through a readable PHP crypt script, and privilege escalation by abusing sudo permissions on hping3 (as documented on GTFOBins). The lab concludes with full root compromise using a discovered private SSH key.