Hey everyone, I just dropped a new walkthrough for the WhiteRabbit machine on Hack The Box.
While the box itself has some cool web vulnerabilities, the real challenge (and the reason I wrote this guide) is the networking. WhiteRabbit is a perfect playground for learning Network Pivoting and ProxyChains correctly.
A lot of people get stuck when they land a shell and realize the target is just a gateway to a hidden internal network. I wanted to demystify that process.
Here is the summary of the exploitation path:
The Foothold: The entry point is a web application running on port 80. It suffers from a classic localized vulnerability (likely LFI or similar) that gets us our initial shell on the gateway machine.
The Discovery: Once inside, basic enumeration reveals a second network interface connected to an internal subnet that our attacker machine can't reach directly. This is where the fun begins.
The Pivot (The Core "Masterclass"):
I break down how to set up Chisel (or SSH dynamic port forwarding) to create a tunnel between your Kali box and the internal network.
I explain the critical proxychains.conf settings. Most people leave it default, but I show why disabling proxy_dns or tweaking tcp_read_time_out can save you from those agonizingly slow Nmap scans.
We use this tunnel to route our tools (Nmap, Burp Suite, etc.) through the compromised host to attack the internal services.
The Internal Target: Hidden deep in the internal network is another service (often something like a strictly internal API or an admin panel). Using the proxy, we exploit this second service to escalate privileges or move laterally.
Why read this? If you've ever had ProxyChains hang on you, or if you've been confused about the difference between Dynamic and Strict chains, this walkthrough clears it up with practical examples from the box.
If you want to stop fearing network pivoting and start seeing it as just another tool in your belt, check out the full guide here:
0 comments