SkyTower - VulnHub Writeup

SQL Injection login bypass and SSH port tunneling.

🖥️ Challenge / Machine Info

  • Platform: vulnhub
  • Name / Title: skytower
  • Difficulty: Medium
  • Target OS / Environment: Linux
  • Key Vulnerability Focus: SQLi / SSH tunneling

Walkthrough

  1. Web Enum: SQL Injection in the login panel bypasses authentication.
  2. Foothold: Obtain credentials, SSH in (which is blocked by TCP wrappers unless tunneled). Pivot using SSH tunnel options.