Electron-Updater RCE - Atom @ HackTheBox

We are going to solve Atom, a 30-point machine on HackTheBox where we'll analyze an electron app and exploit its updater. For root we will enumerate the running Redis instance, find an encrypted kanban password and then decrypt it.

[ Timestamps ]
00:00 Intro
00:20 User
08:36 Root

[ Notes & Links ]

[ Desktop ]

[ About ]

This is purely educational content - all practical work is done in environments that allow and encourage offensive security training.

[mercury]

when he watches his own videos in his videos 🤤

[matthewlandry]

I’ve always wondered how long he has been hacking. It would be fascinating if he would ever go on DarkNet Diaries and tell his story. Enjoy your videos!

Since he is always blooding machines and is mostly the number one in the world on HTB

[brendonbruh]

been struggling with this machine, thanks. But now its already archived

[khalilnacef]

dude how do i make my terminal look like that