HTB — Bank

The Bank machine teaches a complete web-to-root attack path:

1. DNS enumeration — discover bank.htb and perform DNS zone transfer (AXFR).

2. Web enumeration — use Gobuster/FFUF/Dirsearch to find virtual hosts and hidden directories.

3. Authentication bypass — exploit EAR (Execution After Redirect) to access functionality without valid credentials.

4. Web exploitation — identify PHP execution/configuration weaknesses and obtain initial access.

5. Reverse shell — get a shell as www-data and upgrade it to a PTY.

6. Linux enumeration — inspect users, permissions, SUID binaries, and use LinPEAS.

7. Privilege escalation — identify the unusual SUID binary and use it to reach root.

i guss THE bank.htb then seen somthing new popup on my browser

i don't type /login.php automatic pop_up

when i totally stuck what i do and don't find any other step then find somthing new

gobuster dir -u http://bank.htb -w /usr/share/seclists/Discovery/Web-Content/DirBuster-2007_directory-list-2.3-medium.txt

Let's check the /balance-transfer

We have big data let's check size. then click randamly I found these credentials.

5&6.

We can upload a file let's check if we can upload a PHP file to take a reverse shell. then see opps

inspect anf find htb

UsEr FlAg:

RooT FLaG: