I love when you give extra knowledge! It's really helpful and we get to learn something new 😁
@clubby7893
4 жыл бұрын
This was my first box, and I think it shows, with unintendeds at every step. It's been a real learning experience for me though!
@markgentry8675
4 жыл бұрын
I love the ramblings. That's one of the reasons why you are the best! Awesome walk-through bro.
@olivervilo
4 жыл бұрын
I love your videos. I already owned this machine, but watching your video really help me learn a lot of new things. Totally recommended!
@vladyslavdzhoklo2696
4 жыл бұрын
The best explanation of the Box that you can imagine. Great job, IppSec!
@diegoperez458
4 жыл бұрын
Man what a masteclass!! Including how WEP cracking works! Thanks a lot for sharing your knowledge mate!! Amazing!!
@JuanBotes
3 жыл бұрын
thanks for the extra explanations - awesome content as always!
@Thmyris
4 жыл бұрын
Very much agreed on the intro, obscurity is definitely a powerful layer of security if used right.
@assafcohen3173
4 жыл бұрын
I think it's hilarious how you easily explain super difficult things, but then your mind explodes explaining a simple concept such as MOD :) good job though, great box.
@0xshaheen
4 жыл бұрын
Like before watching ♥️
@geeshta
4 жыл бұрын
23:28: Top 10 Anime Betrayals
@osorin_
4 жыл бұрын
So unlucky haha i started this as my first box yesterday, reached the secure crypt part and when i was just about to resume the challenge today i saw it was retired. Anyway, great content as always. Thanks.
@user-oz7pj4tq6l
7 ай бұрын
john cracks that root password hash in a split second
@WillPlatnick
4 жыл бұрын
Thank you ippsec!
@secular2226
4 жыл бұрын
Man I just got lucky did it yesterday nice box and great explanation loved it
@Organicnz2
4 жыл бұрын
Thanks for diving into details it's so helpfull :)
@veritatas678
4 жыл бұрын
Incredible Insight you showed me. Thanks
@devloppeurinformatiquec8486
4 жыл бұрын
i like your vidéo guy , it's so good , i like it
@onochieanyanetu6213
4 жыл бұрын
When you said you didnt want us to see whats in your Download folder i died laughing!
@zeroordie453
4 жыл бұрын
ippsec, you should start using ffuf, its very stable and fast :D Also, I used bandit (the python vulnerability analyzer) for the SuperSecureServer.py Made my life a lot easier!
@dojoku88
4 жыл бұрын
nice info, do you have good resource to start tutorial bandit apps,
@gengsec
4 жыл бұрын
For the web. Love it
@CsernatoniSzilard
4 жыл бұрын
oh man , your videos are like good series :) love every episode :D .... Im a beginner , but one day ill get there :)
@UnknownSend3r
4 жыл бұрын
Do you have experience in the field ?
@skyone9237
4 жыл бұрын
I got frustrated from this box and left without solving...😔😒
@user-ob4bg4hr6u
4 жыл бұрын
Me too, I left it coz its brain fuck not medium
@najibnasar7141
4 жыл бұрын
Love ur videos and thank you so much
@the_unknown8808
4 жыл бұрын
Hero.
@zeuscybersec659
4 жыл бұрын
Guys i need a bit help.Is the Tj null playlist of Ippsec good for oscp prep?I have done various vulnhub oscp level machines.Any other good playlist for oscp?
@real1cytv
4 жыл бұрын
A clock is a really good model to visualize modulus!
@UnknownSend3r
4 жыл бұрын
How so, can't even behind to connect the two.
@ProfessorParno
4 жыл бұрын
bunch of insight i got. thanks for those inspiring stuff. hope my channel can grow as good as yours
@nkitkanjiya7241
4 жыл бұрын
I learn a lot from you..! really appreciate it..
@TheHectorshark
4 жыл бұрын
I don't understand the directory traversal part. He puts /../ before the .py code but the /../ means hes going back a directory when he needs to go forth to the develop directory. How does that work?? Does /../ mean any directory in this case??
@ippsec
4 жыл бұрын
The SuperSecureServer script is outside of DocRoot, there just happens to be a copy of it in DOCROOT/devel. Watch it again the part when I explain how python web apps normally work
@CurrentlyObsessively
4 жыл бұрын
I used dirbuster for the first time on this box. At the bottom checked the box for fuzzing and used /{dir}/SuperSecureServer.py Found it pretty quick
@Reelix
4 жыл бұрын
11:46 - "It's probably because it started with the hashtag" Owch Ipp - Just owch. "I run calculator and... I get a shell" Sounds like your average exploit PoC :p With the new flag system you can actually cat the flag - No need to worry about character counting it :)
@gabenv3.03
4 жыл бұрын
I remember this box. One big pain in the ass is what it is.
@badreddinechamkhi3785
4 жыл бұрын
nice content ! i'm asking about curiosity if u are good at doing ctf's why don't you move to bug bounty ?
@ippsec
4 жыл бұрын
Because bounties are generally low (or unpredictable) pay compared to traditional employment and dealing with people can be a pain. I view bug bounties as a way for companies to get free/cheap work and don’t really want to support them. It’s definitely nice to be able to report something when you come across it, but I’m not going to go out of my way to help a company on a promise.
@daanbreur
4 жыл бұрын
Love the videoss
@ippsec
4 жыл бұрын
Nope
@daanbreur
4 жыл бұрын
@@ippsec Ahh why not xD
@retnikt1666
4 жыл бұрын
Woah, I did this one like 2 hours ago, I must have got lucky it was still online!
@ARZ10198
4 жыл бұрын
Was this free box ?
@clarb027
4 жыл бұрын
Well...that was significantly more impressive than the way i got the www-data shell. XD
@nikohegeheiskanen
4 жыл бұрын
How did you get it?
@vigil33t
4 жыл бұрын
Alexandrovich is patronymic and pronounce as alexAndrovich
@PabloSilva-ph6mk
4 жыл бұрын
47:16 lol, I see I'm not the only one who gets curious over the "why this does not work" and stop everything to find it out
@ertertz9408
4 жыл бұрын
still, doing *nc -q 0 your_ip port < file_to_send* on the remote box auto terminates the nc process.
@snydher
4 жыл бұрын
Hello, thanks for your video.. btw, -Z parameter on wfuzz continue process after error. I found develop folder using this.
@avinavjitgupta9682
4 жыл бұрын
hey , yours videos is very awesome , i saw yours videos ,but some points i didnt get it,bcoz i am begginer, am=nd i start learning ,pentesting,plzz give me suggestion where to start for me,bcoz its very hard to understand all things
@DHIRAL2908
4 жыл бұрын
I think the vs code is named Codium in repos
@TheHectorshark
4 жыл бұрын
You could present ffuf in the next video... Like to show different tools and everything
@NeerajSharma-jg3yh
4 жыл бұрын
How should I start on CTFs not Hackthbox? Please reply !
@Hazeee101
4 жыл бұрын
1:24:56 blow my mind
@Organicnz2
4 жыл бұрын
Alexandrovich is a Russian patronymic or middle name lol
Пікірлер: 60