00:00 - Introduction
01:00 - Start of nmap
02:30 - Looking at the login request, guessing it is Laravel based upon XSRF being in cookie and header
08:10 - Playing with updating genre and viewing feed to discover an error
10:04 - Opening up SQL Fiddle to explain what I think is going on, its using FIND_IN_SET
14:20 - Discovering space is a bad character and when this happens using the -- comment is bad
17:48 - Manually dumping the database with union statements
25:18 - Using SQL Map showing this SQL Injection
30:54 - Going over our recon and discovering a v2 admin login endpoint which lets us login with the password hash
38:28 - Logged in as an admin (Steve)
42:10 - Talking about Exploiting PHP Object Instanatiations then exploiting ImageMagick
1:01:20 - Shell returned, downloading .git, looking at commits and finding Greg’s password
1:07:05 - Talking about the Scanner Binary and showing how we can leak the file one byte at a time
1:10:07 - Creating a python program t
6 views
134
44
6 months ago 00:33:44 1
Best Hacking Laptop 2023
6 months ago 00:27:16 1
Top Hacking Books for 2023
6 months ago 02:00:43 1
hack the box
6 months ago 00:20:43 1
Расследую инцидент взлома | #HackTheBox | КАК ПРОЙТИ #
6 months ago 00:36:09 1
Прохождение #Linux-машины , сложного уровня | #HackTheBox | КАК ПРОЙТИ #
6 months ago 00:30:39 1
Прохождение Linux-машины средней сложности SANDWORM HackTheBox | КАК ПРОЙТИ
7 months ago 00:13:24 1
Прохождение задания UNDER CONSTRUCTION на Google CTF 2023 | КАК ПРОЙТИ UNDER CONSTRUCTION GOOGLE CTF
7 months ago 11:21:04 1
Bug Bounty Course 2024 Updated
7 months ago 07:22:03 1
Ultimate Guide to Ethical Hacking with Kali Linux #ethicalhacking #hacker
7 months ago 00:41:25 4
HackTheBox - Visual
8 months ago 05:30:24 3
George Hotz | Programming | Hack The Box | ctf practice for skill (should tomcr00se return?)
8 months ago 01:02:06 14
HackTheBox Zipping
8 months ago 00:16:21 18
HackTheBox - Sau
8 months ago 02:09:39 12
HackTheBox - Coder
9 months ago 00:15:02 1
Решение машины #topology на #hackthebox
9 months ago 00:13:41 1
Решение машины #cozyhosting на #hackthebox
10 months ago 00:46:30 1
Tier 0: HackTheBox Starting Point - 5 Machines - Full Walkthrough (for beginners)