Glad you enjoyed it :) it was the first box I made for HTB (when I was very new to the platform). I'll be putting up a video soon of my thought process making it and some unintended paths to root that people found. EDIT: Video is up now if anyone's interested
@pauliehorgan
4 жыл бұрын
That would be very very cool
@logancassellis889
4 жыл бұрын
1:13 - By default an unprivileged scan uses -sT (TCP Connect) while privileged (root) uses -sS (TCP SYN Stealth).
@johndoe-fi7jr
4 жыл бұрын
11:00 You have to use the option '-type f' before '-ls' in the FIND command :)
@azelbane87
4 жыл бұрын
WOW!! FABULOUS!!! Really loved the whole process of doing the box: NO EXPLOITS!! That's amazing!!(and very real scenario thing...)!! IppSec, THANKS A LOT 4 every single second of your time doing these walkthroughs!! BLESS!
@nottodaybucko
4 жыл бұрын
hey ipp haven’t watched all your recent videos, is there a video in which you explain why you switched to parrot? have been thinking of doing the same due to it being a bit more lightweight but was jw. great vid as always!
@nottodaybucko
4 жыл бұрын
nvm! searched “parrot” on ippsec.rocks - seems you detail it in the resolute video if anyone else was wondering
@macsemose
5 ай бұрын
i learn a lot from you thanks
@dhruvagoyal9945
4 жыл бұрын
ngl I was expecting 6-hour ippsec video this time
@Organicnz2
4 жыл бұрын
Ahaha yeah)
@ricardogabrieldavid4688
Жыл бұрын
Awesome man 😁
@c1ph3rpunk
4 жыл бұрын
Common Internet File System, the TCP iteration of SMB. SMB originally only ran over NetBEUI/NetBIOS back in ye olden days. MS eventually shimmed SMB to also run over TCP but I think NetApp was one of the first companies to offer CIFS commercially on Data OnTAP.
@TheRagnarokPlayer
4 жыл бұрын
Remember doing this box and just spend about 2 hours just enumerating the SMB
@lloyd-wright
3 жыл бұрын
Thank you ippsec 👍
@priyanshukumarpu
4 жыл бұрын
psexec method at the time of release of this box was GG 😅
@vbscrub
4 жыл бұрын
haha that was my bad. If you check my latest video about 36 mins in I explained exactly why this worked (if you didn't already figure it out)
@EnitinEnitin
4 жыл бұрын
39:42 man nc -C Send CRLF as line-ending. Each line feed (LF) character from the input data is translated into CR+LF before being written to the socket. Line feed characters that are already preceded with a carriage return (CR) are not translated. Received data is not affected. :)
@Ham_B18
4 жыл бұрын
Meu primeiro CTF, Minha primeira caixa, nunca vou esquecer a sensação de conseguir minhas primeiras Flags. Muito foda!
@neoXXquick
4 жыл бұрын
As always amazing video.. just curios will you ever switch back to KALi, not that it matter for you...
@ippsec
4 жыл бұрын
Probably not
@neoXXquick
4 жыл бұрын
@@ippsec So is this distribution better then KAli or it's doesnt matter.. it more matter that you know how to use tools, no on which OS tools are installed?
@ippsec
4 жыл бұрын
@@neoXXquick Distro doesn't matter. If you took every command i ran here and did it on Kali, you'd have the same exact results.
@neoXXquick
4 жыл бұрын
@@ippsec I know.. that i can talk you for it, because you thought about it before putting into video. I would love to have you as neightbought for sure...
@hendrik2765
4 жыл бұрын
How do you make your VM run so smooth? Mine is pretty laggy and I doesn’t feel anywhere near es snappy as yours does, I do give it 8 GB of Ram und 4 cores of my CPU.
@lixiao4259
4 жыл бұрын
I think he use ssd drive instead of hdd drive
@AdityaYadav-zh9pt
4 жыл бұрын
Installing the vmware tools did the trick for me, if you are on virtual box then i am no help sorry
@lixiao4259
4 жыл бұрын
@Pedro Abreu Sata ssd also is well, but nvme ssd is better.
@chewbaccabg
4 жыл бұрын
How - using a good processor with enough cores and fast storage (nvme or sata ssd).
@hendrik2765
4 жыл бұрын
@@lixiao4259 Thing is I do run it on my SSD nad i also have VMWare tools installed, still pretty laggy tho.
@retnikt1666
4 жыл бұрын
Yes, ICMP sockets are accessible only to root (or probably processes with NETADMIN priveleges or something) and that's why ping is setuid
@dg5109
4 жыл бұрын
Nice box. Really learned some tricks. by the way please upload a video teaching how you made your parrot OS look cool.
@buestrm2841
4 жыл бұрын
No dark theme on Visual Studio 2019?😛
@ee79bb3a7
4 жыл бұрын
@IppSec kali or parrot? cuz this is maybe first video you are using parrot - what are your first thoughts (if this is first-ish time you used parrot)
@ippsec
4 жыл бұрын
This is parrot - Last weeks video was, it’s too early to give any opinions
@TomWhi
4 жыл бұрын
28:55 - I know I’ve watched too many of your videos because my brain instantly said “he’s not using ippsec and pleaseSubscribe?!” as the smb username and password when you started writing test 🤓 excellent video!
@buestrm2841
4 жыл бұрын
😂
@enhboldotgonbaatar248
2 жыл бұрын
First time I'm seeing his using windows
@user-jn4rd1ks3z
4 жыл бұрын
Great!
@AllPs3suck
4 жыл бұрын
Funny enough, just covered the Netcat/Telnet CRLF disparity in OSCP. Netcat has an option to send both 0A and 0D through the -C option
@N4dirCh
4 жыл бұрын
Good Job Man ♥️♥️♥️
@madtype5198
4 жыл бұрын
Hey got a quick question here: how do you make your terminal instantly go into the "read mode"? , like you can go up with pgup and pgdn, seems really useful. thanks!
@Trent_111
4 жыл бұрын
When you use cherrytree to take notes, are you saving the file to your virtual machine? Or are you saving your notes on your host machine?
@dxsp1d3r
4 жыл бұрын
Thats why I use Kali !!!
@CodeXND
4 жыл бұрын
FYI "nc" has switch to add
@desjomp
4 жыл бұрын
thanks verry much ! greetz rootsh3ll1
@kruruneiwyn2107
4 жыл бұрын
thanks for the video ya sexy hunk of monk not first :/ eep
@IND_Abhi
4 жыл бұрын
first comment and first like love you
@dunt3929
Жыл бұрын
Hello, where do you find allinfo command at 46:45 I don't see it on man / github Kali and HackTheBox Parrot Machine
@pauliehorgan
4 жыл бұрын
First !!!
@pauliehorgan
4 жыл бұрын
No way was this an easy box by the way........
@D0w0ge
4 жыл бұрын
Instead of a SMB server which seems like it always has problems, why don’t you just make a shared folder?
@ippsec
4 жыл бұрын
Because I don't like to leave services up, it's a lot easier to know I have an SMB Server running when it is not a daemon. Also if anyone authenticates to Impacket's SMB Server you get the hash which you could crack and see what password they used.
@MukeshSingh-ew7ld
4 жыл бұрын
Love your walkthroughs man. Great job But can you also start walkthroughs of the VMs from vulnhub. I am a beginner
@Sniperrkr
4 жыл бұрын
this box was my first root
@nios1515
4 жыл бұрын
ParrotOS?
@MohAnghabo
4 жыл бұрын
What kinda shell is used in this video?
@TheGhostcc18
4 жыл бұрын
WoW! Parrot? Why?
@prob_here
4 жыл бұрын
Parrot is toos smooth to use
@aminhatami3928
4 жыл бұрын
Thanks man. Why r u using parrot os? Can you please record videos by kali. We feel more confortable with it. Thanks again.
@D0w0ge
4 жыл бұрын
He is using parrot OS because htb partnered with them
@ippsec
4 жыл бұрын
@@D0w0ge That and I'm tired of Kali updates breaking things. Also, there literally is not a command in this video that doesn't work with Kali. The OS Doesn't matter all that much when it comes to workflow, both Kali and Parrot are based on Debian.
@aminhatami3928
4 жыл бұрын
IppSec thanks for answering.your reply make me really happy. I know that both kali and parrot os are based on deb and commands are same. But i feel really unconfortable on it. Maybe because my eyes whatched kali too much🤣🤣🤣🤣 and cant accept another os. Thank you very much. Keep it up please and i am one of your huge fans. ❤
@xaxigago9644
4 жыл бұрын
Can someone give me an idea what is he doing all about? Is it something like hacking or... can someone please explain 🤣
Пікірлер: 68