"a lot of you will be disappointed". That can't happen mate. Your videos are a library of knowledge, no matter the length
@sikkavilla3996
3 жыл бұрын
Very much agree - shows to show how easy things can be exploited at some points. Also last week your video was ~2.5 hours, so I hope ppl will cut you some slack
@husseinal-obaidy7310
2 жыл бұрын
True
@p4nz9r60
3 жыл бұрын
Ah, cassic IppSec! "...read the full article, I always like doing", then he forgets to put additional "t" at the end of "User-Agent" header to trigger the backdoor! Please IppSec, never change!😂🥰👍❤️
@sugar833
3 жыл бұрын
This box was a bit harder on release, since the only blog post on the php vuln was in chinese and knife wasn't in GTFObins yet
@themasterofdisastr1226
3 жыл бұрын
But luckily for me, sb had left some ruby code in the user dir, otherwise good luck
@aaaafx_
2 ай бұрын
Did this one today and finally understood why I couldn’t SSH in the machine even though I had the private key. Thanks for the video!
@philipp__3671
3 жыл бұрын
Im thinking that the insane box took longer than anticipated and he had to do a fast easy box to still have a video for us. Still, as always, awesome content!
@AUBCodeII
3 жыл бұрын
Thanks for making this walkthrough. I'm sad I couldn't pwn this machine by myself without having to watch the first 3 minutes and 40 seconds of your video. I legit got scared by the "Knife has been Pwned! " sound effect as this is the first HTB machine "I" pwned lol
@higswat
3 жыл бұрын
I passed oscp because of your videos! Thank you so much for your content!
@socat9311
3 жыл бұрын
well done! mine is in a week, definitely these videos are in my top3 resources.
@mindtropy
3 жыл бұрын
@@socat9311 the other two? :)
@pepemunic3661
3 жыл бұрын
great!
@shyamkishan2326
3 жыл бұрын
Please tell me, What level of machines the oscp have?? Comparison with htb boxes.. 🙂
@chiragartani
3 жыл бұрын
I may take a hour or more to complete this challenge, But you are absolutely legend. 👏👏🙏
@ThenSmoly
3 жыл бұрын
Great explanation! This box took me an entire day but learned a lot 😅
@Itisbane
3 жыл бұрын
My first HTB machine! Thank you, now time to try a live machine:)
@DSAhmed
2 жыл бұрын
short and to the point is good. Even managed to squeeze in more useful general things not specific to this box.
@TechSolutionHindi
3 жыл бұрын
ippsec ❤️✌️
@talio-5469
3 жыл бұрын
Holy crap 12 minutes?!??! this box took me 2 hours Ippsecc!!! D:
@randomguy3784
3 жыл бұрын
Waiting for Monday's video! 🤩
@Matteo-jk2dw
3 жыл бұрын
Dude, i just love u ❤️
@SweatSculptSucceed
3 жыл бұрын
When did knife get put in gtfo bins because it wasn't there when I did the box and the only blogs were in bloody Japanese.
@lespetitjoueurs
Ай бұрын
Hello, I can't put port 80 for netcat It is written "address already in use" Can you help me? Thanks 7:40
@Ms.7k
4 ай бұрын
Good job 🎉
@0xlich
3 жыл бұрын
To be honest, both vulnerabilities were kind of unknown when the box dropped, it was more difficult to get the right information for the exploits and I remember reading a lot about chef to see what I could do to pop a system shell
@liradavid1
3 жыл бұрын
Same here, I had to read a lot about chef to get root. Gtfobins didn't had anything about knife yet, at that time.
@onlyastron4ut
3 жыл бұрын
Don’t need to read a lot about it when you can see on the help page that the exec parameter can run Ruby scripts it and get a root shell via there lol. Definitely a very easy box
@jeremyheng8573
3 жыл бұрын
thanks for the walkthrough!
@MD4564
3 жыл бұрын
Short and long are always good - no problem here :)
@fogofwar342
3 жыл бұрын
You are a legend.
@Hartley94
3 жыл бұрын
Had to double check time length.
@Tea20024
4 ай бұрын
anyone knows why bash -c was used before bash -i ? i cant understand that part. the usual bash reverse shells only mention bash -i
@ippsec
4 ай бұрын
The /dev/tcp/ thing is a bash thing, if the shell is sh, dash, etc it won't work. So putting bash -c ensures that its running bash before sending the shell.
@hextamilan360
3 жыл бұрын
Hello ippsec I am new to HTB . Am want to setup tmux like you . But it's PS1 not looks normal bash I searched everywhere but nothing to get . Given some ideas for me
@micosair
3 жыл бұрын
Real question is ,how on earth do you even merge that into the language??
@dhruvagoyal9945
3 жыл бұрын
shortest ippsec video ever?
@ezioshah
3 жыл бұрын
How are you doing ipp?
@MyTokyodrift
3 жыл бұрын
At 11:00 can someone explain me why this worked? I understand that my public key has to be in "authorized_keys" of the machine in order to connect to it. But how did his public key get in this file in the first place, when he never connected to the machine with SSH beforehand?
@CmpEaxZer0
3 жыл бұрын
He copies id_rsa (private key of the "james" user) to his local machine, then moves the public key of "james" on the victim box into the authorized_keys directory. It has nothing to do with *his* key, he's using the public and private key of "james" to get in.
@MyTokyodrift
3 жыл бұрын
@@CmpEaxZer0 Okay that makes sense, thanks!
@jaopredoramires
3 жыл бұрын
interesting, i didn't know knife/chef existed
@facttrendz1314
3 жыл бұрын
Comptia Network+ vs CCNA for hacking what do you prefer?
@mo938
3 жыл бұрын
Those two things are not the same at all and neither of them help you specifically with hacking. Your question makes no sense. Get them both.......
@facttrendz1314
3 жыл бұрын
@@mo938 thanks for the suggestion
@hadrian3689
3 жыл бұрын
For hacking? Sign up to hackthebox if you haven’t done so already
@AUBCodeII
3 жыл бұрын
OSCP.
@ca7986
3 жыл бұрын
❤️👌
@nullpwn
3 жыл бұрын
wow, that was a short one
@szymex73
3 жыл бұрын
surprise video being another ropetwo section? 👀
@ippsec
3 жыл бұрын
Haha Nope that is not it.
@szymex73
3 жыл бұрын
@@ippsec awh, was hoping to finally see how to get user :P
@Techvilla1745
3 жыл бұрын
Which distro do u use?
@ChrisSoehnlein
3 жыл бұрын
Parrot OS based on PwnBox which HTB uses
@TimOdoms
3 жыл бұрын
Maybe you can go a little fast next time on the last half :(
@dune2493
2 жыл бұрын
Bro why don't you create a discord server
@ippsec
2 жыл бұрын
I don't like spending more than 10-15 minutes in chatrooms a day.
@zapapapower
3 жыл бұрын
First time i did this machine, it didn't have posts and exploits, maximum a articles in japanese
@thatscouserjay
3 жыл бұрын
Is this the worst HTB machine? I'd vote either this one or Mirai, you learn basically nothing from doing them other than "how to Google for stuff"
@ippsec
3 жыл бұрын
Oddly enough, learning how to google stuff is by far the most important thing in infosec.
Пікірлер: 65