Ollie - TryHackMe - SQL Injection - Remote Code Execution - CVE-2022-23046

In this lab, we exploited an "unfixed" SQL injection issue in one of the web applications (CVE-2022-23046). We tried #SQL injection to create a shell file and remotely executed the file (#RCE) to establish a callback and gain the foothold on the target machine. As the next step, we moved horizontally in the system and became the user Ollie. Finally, we exploited a cronjob where the binary was owned by the root but could be changed by Ollie. A new reverse shell enabled us to gain the root privileges on the target machine.