05 Passwords & Ciphers

Re-use!

• If you get a password

• Re-use it for root!!

• Might get you in! (beepHTB, nodeHTB)

• Ex:

  • Found Mark's mongodb password

  • ssh mark@$IP ..worked!!!