Awesome vid that buffer overflow working on first run was sick
@spent1276
3 жыл бұрын
IppSec drinking game: Every time he says "Let's see..." take a drink.
@FuzzFuck
3 жыл бұрын
or every time an add plays, take a drink
@noway5930
3 жыл бұрын
‘if EXPR: return True;else: return False;’ this is same as ‘return EXPR’. Great vid :D
@Ms.Robot.
3 жыл бұрын
Your stroll to the snmp string and rush of the Buffer overflow was very Charming and well explained. Loved it. 💝💝💝😍
@sreyanchakravarty7694
3 жыл бұрын
Never a dull moment with Ippsec. Thank you so much for your videos.
@haniagel3896
3 жыл бұрын
oh ippsec is here this is going to be a great weekend 😍😍
@Seferan
3 жыл бұрын
5:36 - The difference when you're authenticated vs not authenticated is the menu option for Submit. Its exactly what you said previously, that the "Auth" only givens you the link/menu option.
@loganmay2105
3 жыл бұрын
This was probably my favorite box, sad they retired it Edit: 1:46:41 there is no ASLR on this binary Edit 2: I want to point out you can run GDB commands through pwntools and automate all that manual work
@-zer122
3 жыл бұрын
Great video, as always ! The exploitation part was a bit too fast, but maybe you have been planning on extra videos for showing more binary exploitation (entry level) Ffuf is kinda cool but not a finish tool as gobuster or wfuzz are. They made ffuf complex with 'filter' instead of 'hide' as in wfuzz, and moreover the export format don't have TXT. And if you set the -recurse options (dirb like) the output is trash for all over the website targeted
@exag0ra
3 жыл бұрын
@- ZER Totally agreed on FFUF. I used to use it, but I much prefer wfuzz or gobuster to it. Have you tried FeroxBuster (github.com/epi052/feroxbuster)? I just started using that within the past 2 weeks or so and it's a really cool tool written in Rust. It's very fast compared to gobuster, FFUF, and Dirsearch, plus it does recursion by default extremely well.
@Xblade45
3 жыл бұрын
Great video, very enjoyable :) Also, JSON requires double quotes -> " :)
@azelbane87
3 жыл бұрын
Absolutely AWESOME!! IppSec, WE Absolutely LOVE YOU & ur VIDEOS!!!👏👏👏✊👋
@michaelbann3485
3 жыл бұрын
Fun fact -- print in python3 takes an argument "flush" which does exactly the janky print/flush stuff you're doing but in a single kwarg. i.e.: print("Something", flush=True).
@Buiscit1738
3 жыл бұрын
most underrated comment.
@moblemeh152
3 жыл бұрын
Great video as always thanks for the hard work !
@JoseGonzalezDynamEq
Жыл бұрын
Respect😅👍
@goebbelsx
3 жыл бұрын
Can you make one video about 1 day exploit development? or how identify already patched vulnerability. There are few resources but there aren't many and I struggle to find solid learning resource. I am sure you have some experience in it :)
@ASoggySandal
3 жыл бұрын
This was a great video and box!
@cybersecurity3523
3 жыл бұрын
Welcome back pro
@hassanabdul-kareem2287
3 жыл бұрын
still at the scripting part you should have used binary tree to optimize it further and minimize the the amount of requests you need X > 100 = True x = 200 = False x = 200+100/2 -> x = 150 = false x = 100+150/2 -> x=125 = false ... until you achieve x is between 103/101 which is definitely 10 and so on. This would be super duper fast. I guess you didn't do it because that & what you would would do the same job and get it done :) This video energized me to do some SQL Injection labs, Thanks man.
@ippsec
3 жыл бұрын
I'm pretty sure I explained that and in showed extracting a single character as a unicode # to make that relatively easy... Just didn't show it because this is live coding and I don't do that nearly enough to write a decent algorithm or know what to google to get one done quickly. When doing PenTests (or videos), there's an art to deciding will doing this "the correct way" take more time than if I just do it quickly and get the result? It's a bad habit but I feel if you always go for the best it will be hard to get everything else you want done.
@hassanabdul-kareem2287
3 жыл бұрын
@@ippsec I totally agree on that point. Although I'd say that nobody would hate extra content, they can skip a part if they don't like it. In any case, I always watch your videos for the sole purpose of well built and demonstrated methodology.
@ChrisSoehnlein
3 жыл бұрын
Awesome video! Started losing my way around the Buffer Overflow section. Would love a video explaining Buffer Overflows from your mindset and the tools you use. I've been learning via Immunity Debugger but still struggling which really halted my progress on this box when it was active.
@amirkiani2253
3 жыл бұрын
Good Bro
@j4ck_d4niels
3 жыл бұрын
Intense really hard box, am stuck at enumeration point and I got lazy to step back and think again
@phyzix_phyzix
3 жыл бұрын
Burpsuite needs a dark mode
@wchen2340
3 жыл бұрын
i can barely understand half of the stuff he does. but its awesome
@shaikjilani8242
3 жыл бұрын
EXCELLENT BRO❤️❤️❤️❤️ LOVE FROM INDIA
@3zehnutters
3 жыл бұрын
If you want to do flush printing in python3 without sys, then try the following syntax: print(f"promt: {acc}", end=' ')
@DHIRAL2908
3 жыл бұрын
48:25 I just did it like %pw[:-5]% so it only checks the last 5 found chars with the forward one...
@chrisrice8836
3 жыл бұрын
At the 45 min mark when trying to brute the hash and coming up against the character limit, couldn't you just take the second half of the hash and stick a % at the start? Like '%ddfd9 ) THEN...
@mehmetux4186
3 жыл бұрын
does anyone recommend me good book or tutorial or any source about reverse engineering and stack overflow attack binary exploitation?( like web application hacker handbook book )
@mehmetux4186
3 жыл бұрын
@@hassanabdul-kareem2287 thank you very much. it is what exactly i look for
@youtubepremium5293
3 жыл бұрын
I m from india today is diwali bro happy_diwali ❤️💥💥❤️
@puppe1977
3 жыл бұрын
At 32:08, why not just 'return "OK" in r.text'?
@jaybachre6976
3 жыл бұрын
What do the different values of levels and risks mean in sqlmap?
@Seferan
3 жыл бұрын
Timestamp for 12:00 should read SQLMap, not NMap
@ippsec
3 жыл бұрын
Thank you fixed.
@xXThePr0Xx
3 жыл бұрын
Wouldn't Log Poisoning be an option to get a shell with logdir and logfile?
@ippsec
3 жыл бұрын
No. There’s no code execution how they are doing File Reads.
@xXThePr0Xx
3 жыл бұрын
@@ippsec oh yeah, nvm then
@ristbs9057
3 жыл бұрын
how do you manage to know all this ??? you learned by yourself ?
@gtgt8564
3 жыл бұрын
2hrs????????
@glenrodrigues8149
3 жыл бұрын
I am new(noob)to this field can anyone tell me how to reach at this level
@TheGrimSniper14
3 жыл бұрын
Years of practice. When you’re getting into the nitty gritty especially with things like binary exploitation, it can require a lot of background knowledge so watching videos like this without knowing the background info is gonna be confusing because you don’t have the context of why he’s doing what he’s doing and how he got to some decisions
@samu5167
2 жыл бұрын
@CHICKEN-DESTROYER learn it yourself and find out ;)
@spoopymayers2224
3 жыл бұрын
Ay man, make the apt machine pls
@kret63
3 жыл бұрын
Why spend 2h watching dumb movies when You can watch IppSec? :D
@comtuber6811
3 жыл бұрын
my man love your videos but you should write more code man! either you cannot code on the fly or you're not a good algorithm reader
@ippsec
3 жыл бұрын
Not a great code writer and it’s doubley hard to talk and code simultaneously.
Пікірлер: 52