I loved the addition of the notes, its worth the extra time as it really helps cement the process in mind and is illuminating to see the complete process. Please keep them coming like this.
@buestrm2841
3 жыл бұрын
I will NOT see you next week yet, because we have to fix these notes 😂 Thanks for the Notes! It will help a lot understanding the methodology
@sicilianmafia8321
3 жыл бұрын
Man, your videos are immensely helpful in preparing OSCP. Heartfelt gratitude for what you are doing. Grazie. Just a small request, if possible, try to zoom in command window before you fire them one by one. Thanks once again.
@Ms.Robot.
3 жыл бұрын
This makes another nice addition to my collection, between my network security and reverse forensics. Nice flow, clear, and intuitive.
@deathtoyou56
3 жыл бұрын
This is the channel that I've needed all along
@JuanBotes
3 жыл бұрын
thanks for awesome training content, please keep it coming
@jonathanmartins7744
3 жыл бұрын
Man.... your videos are very satisfying to watch!
@bulmavegeta23
3 жыл бұрын
awesome explanation sir. I keep studying and soon I will reach that level like yours
@pl7771
2 жыл бұрын
Damn dude how are you so smart, I become crazy watching this🙆♂️
@user-vq6ym6qg4j
3 жыл бұрын
I noticed sometimes vim highlighting looks better than bash in Obsidian. Love Obsidian btw I'm happy you showed it
@Catty9811
3 жыл бұрын
This was the first box I ever tried. It's reassuring to know it's not very beginner friendly and could be rated easy-medium as I found it pretty frustrating.
@grandmakisses9973
3 жыл бұрын
@T3nsh0 yea the box was alright till then
@nmkkannan1256
3 жыл бұрын
London').os.execute() another guess. there is no logical way to do this injection
@DHIRAL2908
3 жыл бұрын
42:54 I think doing ps -auxwww would have provided the rest of command!
@Jambion
3 жыл бұрын
Dude pass me that ps list, auxwww
@grandmakisses9973
3 жыл бұрын
Nothin better than a ippsec vid
@psd00m
3 жыл бұрын
Vid + Notes 🔥🙏❤️
@younesmohssen8158
3 жыл бұрын
Question, did anyone else figure another way to trigger the command injection without having to use ffuf special characters to find out that you needed to use the closing bracket?
@cjod634
3 жыл бұрын
Nice work
@84xyzabc
3 жыл бұрын
and this is what they call easy box!
@-zer122
3 жыл бұрын
Great video !
@humanoidcarnation9524
3 жыл бұрын
Thank you IppSec
@TheErixcode
3 жыл бұрын
@44:37 you have used // before weather
@amietinen
3 жыл бұрын
I was thinking something like this would work: ' or os.execute("id") From this example, where if os.getenv("EDITOR") returns nil, it falls back to vim editor = os.getenv("EDITOR") or "vim"
@s0lanav
3 жыл бұрын
Very nice :)
@Umar0x01
3 жыл бұрын
thanks!
@thednalofi6437
3 жыл бұрын
Thx ippsec
@eklypzn
3 жыл бұрын
You can just url encode the contents of rev.sh in the url and get a shell as well
@ippsec
3 жыл бұрын
While rev.sh works and is a cool site. I would never advocate getting in the habbit of executing code from a 3rd party you don't know on systems you don't own. I wouldn't even run it on my own blindly... Sure the site works now but what happens if the owner forgets to renew DNS and it gets hijacked?
@malikkkk2679
3 жыл бұрын
@@ippsec I think he meant url encoding the contents of the "rev.sh" file, he's not talking about the rev.sh website
@eklypzn
3 жыл бұрын
@@malikkkk2679 Yeah that is what I meant. I am curious about that site now though.
@Jambion
3 жыл бұрын
@@eklypzn probably a bad idea
@petershuker163
3 жыл бұрын
sql works ok as a nmap test highligher
@frankdSda
3 жыл бұрын
why is necessary use comment '--' at final payload?
@thomashirtz
3 жыл бұрын
Quite confused why your listing is 05, 10, ... ^^"
@MD4564
3 жыл бұрын
Loving your videos man, do you have a complete setup of your box ?
@Umar0x01
3 жыл бұрын
18:54 not using with ffuf was the issue?
@Umar0x01
3 жыл бұрын
continuing forward, yes.
@tomjohnes5030
3 жыл бұрын
Why does Basic auth prompt seems odd to him at 4:33 ?
@jdbjdb2
3 жыл бұрын
Because normally you'd need password to go to files within the domain (index) if you need a password for the root of the domain
@cansofcoke
3 жыл бұрын
guys do we think this is a box you should be able to speed through prior to sitting your OSCP exam? is this more/less advance than OSCP Standard?
@ursr78122
3 жыл бұрын
Could you share your notes for this box please? Just want to analyze them and be more familiar with obsidian.
Пікірлер: 45