Around the 20 minute mark - my brain exploded. I'm starting to question whether or not IPPSec is human or not. Are you an AI bro?
@_hackwell
Жыл бұрын
Hi! could you make a video about how you rebuild your box ? We all have our own way I guess
@silicondioxideSi02
Жыл бұрын
I second this request.
@ysoseal
Жыл бұрын
third
@NicolastheThird-h6m
Жыл бұрын
i think It's a pwnbox from htb
@fxs5501
6 күн бұрын
There is also a way to exploit the seprivilege with potato Good Video!
@KellenBegin
Жыл бұрын
great video, also a box rebuild video would be awesome
@haoming5630
Жыл бұрын
This is literally the besst machine so far
@sb77de
Жыл бұрын
that tmux situation got clearly out of hand at some point 😆
@gmabreak
Жыл бұрын
the goat! :)
@Naneto_00
Жыл бұрын
Nice job
@glens6145
Жыл бұрын
The real curl binary now lives in Windows/System32 if that makes things easier. Not sure what version of Windows they started doing that with though
@yuyu-ce4fz
Жыл бұрын
Nice
@sand3epyadav
Жыл бұрын
I love ippsec
@RobertPodosek
Жыл бұрын
What linux distro do you run for hacking? Kali?
@painfulwill
Жыл бұрын
This is Parrot OS HTB edition
@stackcanary3368
Жыл бұрын
Did you leak your public IP ?
@lool7922
Жыл бұрын
thanks
@Lapatate-s1l
6 ай бұрын
Hi . Nice videos . I don’t understand how did u have an smb connection by manipulation de RFI url . What is happening on the url ip/please/subscribe . I didn’t understand this part of the video . The script only prints content of a file . Can you explain me please ? Thank you very much .
@splendorblackman2487
4 ай бұрын
I believe we try to make a smb connection back to our attacker box, and when it tries to connect it gives the user name/hash and we capture the traffic with responder. Since the one trying to make the connection is a service (svc_apache) we get those credientials. As far as I am aware, AD stuff almost everything communicates with their user/hash combo
@yuyu-ce4fz
Жыл бұрын
Can I use potato in iis priv?
@tg7943
Жыл бұрын
Push!
@rmcmahon1000
Жыл бұрын
Can someone please let me know why RunAsC is needed and can't just use PS credential Object?
@ryuzaki1705
8 ай бұрын
Because PS credential object works when you have a real terminal so when you are connected throught ssh, rdp, ecc.. If you are using meterpreter or another kind of reverse shell it will not work because is not "native"
@lumikarhu
Жыл бұрын
thanks, i learned a lot, like uploading desktop.ini and catching the response but i'd be still stuck at the kerberos appool part. gotta try harder i guess. BTW please do a rebuild video!
@abyanhafiizh-3065
2 ай бұрын
what a brainfuck machine 🔥
@kazhiroma9736
Жыл бұрын
Do you use a VPN to connect to HTB besides the VPN they provide to connect to it. Like one to hide public IP
@flrn84791
Жыл бұрын
uh
@RajatSharma_1111
Жыл бұрын
Hi Ippsec, I am testing one box and ports that are open are 80, 443 and 3389. Port 80 and 443 opens the same web page and its a login screen. I have ran sqlmap, able to enumerate database name but not the tables. getting some errors. Bruteforced dirctories, but nothing interesting ad also ran bruteorce for 3389 but no luck Can you pleas perovide any inputs?
@flrn84791
Жыл бұрын
How was this box seriously rated as hard? 😂🙈
@AUBCodeII
Жыл бұрын
What's going on, my politically incorrect racial epithets, it's ya boy Ippsec
Пікірлер: 34