HackTheBox - Trick
00:00 - Introduction
01:00 - Start of nmap
02:30 - Poking at the DNS Server and discovering its hostname when querying itself
03:00 - Using dig to show the reverse lookup aswell, then perform a zone transfer with axfr
04:30 - Just showing dnsrecon to bruteforce a range of IP’s, not really relavent to this but figured I’d show it
06:00 - Poking at the website and logging into the website
07:30 - Finding an LFI that allows us to disclose PHP Source code, can’t do much else because it appends .php to our string
12:15 - Using SQLMap with the login to extract files
14:20 - SQLMap only found time injection, changing the levels and specifying the techniques which allows it to find a quicker method
16:45 - Having SQLMap extract the nginx configuration and discovering another subdomain
19:10 - Checking out the new domain , discovering an LFI but this time the extension is in the URL!
21:30 - Going over the source code of the LFI to show why th
50 views
929
394
3 months ago 00:10:23 1
I Played HackTheBox For 30 Days - Here’s What I Learned
6 months ago 00:00:00 1
Хакерство для всех: понятные инструкции для начинающих | Иван Глинкин HydrAttack
7 months ago 00:04:06 1
Решаем “Тред Ариадны“ | TINKOFF CTF 2024 | EASY
8 months ago 00:32:44 18
HackTheBox - Analytics
8 months ago 00:34:38 2
HackTheBox - Manager
8 months ago 01:27:34 5
HackTheBox - AppSanity
8 months ago 00:37:18 6
HackTheBox - CozyHosting
8 months ago 00:41:25 5
HackTheBox - Visual
8 months ago 01:46:13 2
HackTheBox - Drive
8 months ago 01:12:42 4
HackTheBox - Builder
8 months ago 00:26:29 1
HackTheBox - Keeper
8 months ago 02:06:46 2
HackTheBox RegistryTwo
8 months ago 00:54:43 11
HackTheBox - Clicker
8 months ago 02:05:30 1
HackTheBox - Bookworm
8 months ago 00:33:44 1
Best Hacking Laptop 2023
9 months ago 00:27:16 1
Top Hacking Books for 2023
9 months ago 00:30:39 1
Прохождение Linux-машины средней сложности SANDWORM HackTheBox | КАК ПРОЙТИ
9 months ago 11:21:04 1
Bug Bounty Course 2024 Updated
11 months ago 05:30:24 3
George Hotz | Programming | Hack The Box | ctf practice for skill (should tomcr00se return?)
11 months ago 01:02:06 16
HackTheBox Zipping
11 months ago 00:16:21 18
HackTheBox - Sau
11 months ago 02:09:39 15
HackTheBox - Coder
11 months ago 00:29:19 2
Прохождение Linux-машины средней сложности SURVEILLANCE HackTheBox | КАК ПРОЙТИ