I have been binge watching ippsec videos for the last month and I learned a lot! Thanks a lot for these tutorials
@vonniehudson
Жыл бұрын
@ippsec congrats on 200k subs!! I remember I first met you like 7 years ago in Maryland when you visited Ben at his Cyberface meetup. You were telling everyone how to capture WiFi credentials using a Pineapple. You’re just as talented and helpful now as you were then and I’m so thankful for all you’ve done for the cyber community. Here’s to your next 300k subs!
@AUBCodeII
Жыл бұрын
Hey, I'm currently taking a Udemy course taught by you lol
@julianopl
Жыл бұрын
Quadruple thumbs up for you ippsec! The linpeas modification and all the other tweaks with postgres and everything is just awesome!! Learning lots and lots from you. Thanks a lot!!
@sand3epyadav
Жыл бұрын
I love ippsec guruji..... awsown forgot... host header attack and cache poision... ❤ Tq for mentor....
@kariminal2999
Жыл бұрын
Great video as always. 23:05 - I think is meant to be labelled as snmpbulkwalk instead of brutewalk. 1:00:30 - fyi if you do less -R it will interpret the control characters and render the output properly Also out of interest is there any tips you would give for spotting when a tool is not picking something up. For example tried nmap, hydra and onesixtyone which meant for ages I just thought there was nothing more in SNMP and that it might be something I had to come back to later. Is there anything which would give away to you that you needed to try something else against a service (in this case it was SNMP and using snmp-brute, but it could be anything.) Thanks!
@ich3aa
Жыл бұрын
What a plot twist from hackthebox to how develop a secure fastapi api
@souleymaneadellah1176
Жыл бұрын
Its always very funny seeing you not be familiar with some basic developer terms or frameworks (like when you forgot r is for retrieve in crud). Guess you're human after all 😅. Love the vids btw, keep it up
@maixicek
Жыл бұрын
Awesome video! Thank you for posting 🙂
@Hckr-ei2xj
Жыл бұрын
legend
@B4ch4r
Жыл бұрын
Ippsec is the best MENTOR..!!
@dreftpumpkiller3081
Жыл бұрын
i have a question ippsec is it also possible to login as james by bruteforcing the secret of the jwt and then creating our own jwt? because we have the the required information to do it right?
@user-xl5oz4ws9g
Жыл бұрын
Im assuming that internal was not discovered by Hydra and onsixtyone as it was on SNMPv2c. Public was the only v1 string and was picked up by both. It is likely that Hydra and onesixtyone only use SNMPv1.
@hm-jr4ok
Жыл бұрын
Love the video!
@FMisi
Жыл бұрын
[Interesting behaviours of HTB] - When I submitted a flag on the seasons, it said "Wrong flag". But then I submitted the same flag immediately again and the flag got accepted. - When I go to an Active machine, and immediately click on the "Walkthroughs" button... well, I can click on the "Walkthroughs" button which shouldn't happen. It says that I am unauthorized but I can submit a walkthrough on that panel. If I am slower, I cannot submit a walkthrough on that panel as it gets denied before I can click on the "Walkthroughs" button
@xira7078
Жыл бұрын
How did you discover the password at 26:15 ? I was not going to soft through 9 000 lines of output, especially when I was not sure of what I was to look for, and you kind of just drifted to it.
@ippsec
Жыл бұрын
By default SNMP does not show running processes. It is something that gets configured (or used to) because a lot of old monitoring applications would use SNMP to see if a process is running. But since SNMP showed running processes, chances are there was something there because the author would not just randomly enable it.
@sotecluxan4221
Жыл бұрын
Incredible!
@everything-om3zx
Жыл бұрын
what OS is that? did you customize it with Hack the box logs or its a VM made by HackTheBox, if its where i can download it from?
@B4ch4r
Жыл бұрын
In the Parrot OS website there is a custom version for HTB
@StevenHokins
Жыл бұрын
Super cool!
@tg7943
Жыл бұрын
Push!
@bughunting-zi4xp
Жыл бұрын
Nice bro 🙂
@whendidwebecamelikethis
Жыл бұрын
Noice ^^^
@otaldohenrik
Жыл бұрын
youre amazing
@dazed1111
Жыл бұрын
Thanks boss
@kalidsherefuddin
Жыл бұрын
Thanks
@pa-vl1kg
Жыл бұрын
@1:18:30 guys put on the binocular spectacle, you will need it, lol. Nice podcast from 1:18:30 onward.
@yoseflevy6567
Жыл бұрын
thanks a lot for the videos. 1q y my ffuf doesn detect the api vhost?
Пікірлер: 34