This was amazing!!! thank you. I love how you take us through this really long learning path of swapping out the architecture and finally getting the metasploit payload to work. Then right at the end you do in a second by using Evil-WinRM and the powershell script. This was an immensely fun box.
@nirzaaa
Жыл бұрын
Must say that I liked more the videos where you solved the machines for the first time on the video itself, but you're rocks this way too of course, well done ;)
@spacenomad5484
2 жыл бұрын
MFP certainly stands for MultiFunction Printer and nothing else, I can't think of any other (possibly obscene) meaning for the letters M and F.
@MD4564
2 жыл бұрын
Correct.
@ripmeep
2 жыл бұрын
Correct x2.
@D3M0320
2 жыл бұрын
This is really interesting timing considering I spent most of yesterday turning off FTP, SMB and changing SNMP community strings for a lot of printers in our environment, and changing default passwords if I found any…
@TracerPortable
2 жыл бұрын
So the intended way was way I didn't even notice. Nice.
@abhishekmorla1
2 жыл бұрын
i was waiting for it🥰
@softwaredeveloper9652
2 жыл бұрын
Waaao. I like very much this. I am happy for this tutorials.
@user-xv9wv8ef3n
7 ай бұрын
Great video! Question, when you created the MsfVenom exploit file, are we able to specify/use a non-meterpreter payload too? and if we go that route can I use netcat instead of metasploit to catch the shell?
@MrShooksy
2 жыл бұрын
Thanks Ippsec! Great video!
@PR1V4TE
Жыл бұрын
5:33 how to make Firefox to run whatever we type to execute as domain instead of default Google search. Cus when ever I type an IP address it takes me to Google. I have to type http at least at the beginning.
@SamNetw0rk
2 жыл бұрын
🔥🔥 awesome, thanks for interest content
@cybersecurity3523
2 жыл бұрын
Good job bro
@johns0n328
2 жыл бұрын
Great!
@Heyhey_1792
2 жыл бұрын
I checked the patreon for peass, and there’s only 1 extra patreon :(
@ippsec
2 жыл бұрын
I will - the MFA for my patreon is setup to an old phone. So I'm locked out temporarily lol
@Carpcontrol
Жыл бұрын
@@ippsec that is ironic lol
@josephsarkisian
2 жыл бұрын
Wouldn't uploading the SCF file to an MFP as a firmware update in a prod environment potentially break the MFP?
@declanmcardle
2 жыл бұрын
@3:00 would 389 be open if it was a DC / TGS?
@Kaminchen
2 жыл бұрын
This is called penetration testing right? That would be the job title?
@AOSRoyal
2 жыл бұрын
crack dealer
@Carpcontrol
Жыл бұрын
Yeah penetration hardens the system iukwim
@gabrielsantos19
2 жыл бұрын
What happened at 33:44? The exploit created session 5 before you Ctrl+c? Thank you for your videos, IppSec.
@ButIfWeSurvive-WeHereInTheEnd
2 жыл бұрын
👏🏻👏🏻👏🏻👏🏻👏🏻👏🏻👏🏻
@declanmcardle
2 жыл бұрын
IPP/CUPS is 631? I've forgotten what lpd is...lost in the annals of time...let's see what happens here...
@declanmcardle
2 жыл бұрын
515 I think...however, it's Windows which is being attacked, not the printer :-)
@uchiha6428
2 жыл бұрын
How did u install evilwinrm on parrot os? Im having trouble installing it thats y
@podavu7044
Жыл бұрын
He is using the htb parrot machine , which comes with a bunch of pre-installed tools , but if u want i guess u can just git clone and install the requirements
@boyfromfuture69
2 жыл бұрын
Thanks ippsec nice video
@muhammadghareeb399
2 жыл бұрын
prince
@blackthorne-rose
11 ай бұрын
O.k. Ok... wtf is a "lull bend"?!?! lol Google gives me nothing!
@ruthwikkrishna8234
2 жыл бұрын
first veiw
@marcelomedina7969
2 жыл бұрын
hello can you make the new machine removed from hackthebox OBJECT please!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
Пікірлер: 37