For some reason, the last video got stuck encoding on YT’s side and was 360p. Reuploaded and it worked the second time.
00:00 - Introduction
01:00 - Start of nmap
04:00 - Downloading source code from gitea
04:30 - Examining the website via browser to see what it does
07:30 - Making sense of how the sitebuilder works
14:20 - Examining the source code, discovering a file disclosure
24:00 - Creating a python script to automate the File Disclosure
48:00 - Script is done, downloading nginx configs. Then trying to find any directory we can write a PHP Script to
55:00 - Looking at how the site adds a pro license to users
58:50 - Explaining how we can do a protocol smuggling attack and access the REDIS socket to manipulate our user
1:05:19 - Showing that the plus is not being URL Decoded in the path of a URL but is
1:08:48 - Uploading a PHP Script to get code execution
1:13:55 - Dumping the REDIS Database and getting cooper’s password
1:17:10 - Looking at the
7 views
773
446
2 months ago 00:10:23 1
I Played HackTheBox For 30 Days - Here’s What I Learned
5 months ago 00:00:00 1
Хакерство для всех: понятные инструкции для начинающих | Иван Глинкин HydrAttack
7 months ago 00:04:06 1
Решаем “Тред Ариадны“ | TINKOFF CTF 2024 | EASY
7 months ago 00:32:44 18
HackTheBox - Analytics
7 months ago 00:34:38 2
HackTheBox - Manager
7 months ago 01:27:34 5
HackTheBox - AppSanity
7 months ago 00:37:18 6
HackTheBox - CozyHosting
7 months ago 00:41:25 5
HackTheBox - Visual
7 months ago 01:46:13 2
HackTheBox - Drive
7 months ago 01:12:42 4
HackTheBox - Builder
7 months ago 00:26:29 1
HackTheBox - Keeper
7 months ago 02:06:46 2
HackTheBox RegistryTwo
7 months ago 00:54:43 11
HackTheBox - Clicker
7 months ago 02:05:30 1
HackTheBox - Bookworm
8 months ago 00:33:44 1
Best Hacking Laptop 2023
8 months ago 00:27:16 1
Top Hacking Books for 2023
8 months ago 00:30:39 1
Прохождение Linux-машины средней сложности SANDWORM HackTheBox | КАК ПРОЙТИ
9 months ago 11:21:04 1
Bug Bounty Course 2024 Updated
10 months ago 05:30:24 3
George Hotz | Programming | Hack The Box | ctf practice for skill (should tomcr00se return?)
11 months ago 01:02:06 16
HackTheBox Zipping
11 months ago 00:16:21 18
HackTheBox - Sau
11 months ago 02:09:39 15
HackTheBox - Coder
11 months ago 00:29:19 2
Прохождение Linux-машины средней сложности SURVEILLANCE HackTheBox | КАК ПРОЙТИ