Just got me eJpt cerification today, and all because of your videos, i learned a lot from you, thanks alot, looking forward for next adventure :)
@NicolastheThird-h6m
2 жыл бұрын
Way to goo! 👏🏼🎉
@dylbert140485
2 жыл бұрын
OSCP let's gooooooo!!
@abdosama
2 жыл бұрын
@@dylbert140485 that's the next stop :)
@MrFontaineInc
2 жыл бұрын
I really appreciate the mitigations explanation. The real value add for offensive security is the ability to advise and recommend security controls and fixes to secure networks and applications.
@agopo
2 жыл бұрын
Your ease of doing these things is incredible. Great content, keep it coming
@readysetexploit
2 жыл бұрын
I remember you covering the EAR vulnerability a few years back when you did the Bank box and it has always stuck with me. And here we are a few years later covering it again. Thank you for the video!
@emptypizzabox
2 жыл бұрын
My first run through this took me FOREVER to gain reverse shell (I didn't know about URL encoding until you mentioned it). I originally followed a trick from John Hammond and uploaded a php reverse shell in the upload file feature on the webapp. Couldn't get it to work. Eventually, I got a non encoded command to run in burp. Also, that bad char in the accounts table was an actual salt emoji. Fun stuff, good run through as always Ipp!
@henrycook859
2 жыл бұрын
At 27:36, I believe it was the 3 lines after your request, while common place is to have only 2 lines. You can try on other servers to confirm if you want though. Great video as always! 😁
@brunom6145
2 жыл бұрын
i didn't know about the option in burp to intercept the response, now this opened so many possibilities in my head lol
@androiddev3123
2 жыл бұрын
Great tip with saving the request for sqlmap and using --batch 👍
@Ms.Robot.
2 жыл бұрын
This had a uniques style of it's own.very impressed. ❤️
@BluEhui09
2 жыл бұрын
Thanks man! cant wait to see more vids from you!~
@lawaace1056
2 жыл бұрын
Great job bro , ur like my idol lol . I did that box a long long time ago so I forgot it completely and thanks for reminding me of it
@RedBlueLabs
2 жыл бұрын
Very helpful video. I appreciate the detail and that you step through what you are doing. thanks :)
@vadik1001
2 жыл бұрын
done this box a while ago, but walkthrough`s by ippsec is priceless. so gonna watch anyway
@tntxqx8281
2 жыл бұрын
ippSec we glad to see you agin Big fan
@MeshTheOne
2 жыл бұрын
Gold as always! 👌🏼
@mselmikraiem2153
2 жыл бұрын
thx ippsec much love
@surenavdalyan6036
2 жыл бұрын
THE BEST, as always
@pampipipi8254
2 жыл бұрын
Can i have a comment heart from you my idol?
@ippsec
2 жыл бұрын
❤️
@pampipipi8254
2 жыл бұрын
@@ippsec Thanks a lot
@AvinashKumar-fe8xb
2 жыл бұрын
Great video as usual :), just one question why you keep calling it IDOR vulnerability? In my knowledge IDOR is something when an input referenced to extract some information without verifying if that input is owned by that user.
@ippsec
2 жыл бұрын
May be a mistake on my end. When something doesn’t check for authentication, I generally call it IDOR.
@uzayhanibal3029
2 жыл бұрын
u are perfect i respect you
@s1ckskunk
2 жыл бұрын
can't wait to view more vids!
@y.vinitsky6452
2 жыл бұрын
Brave browser to the rescue. Very few ads including KZitem ever get through
@_hackwell
2 жыл бұрын
Nice video ! Did this box some time ago it was fun ! anyway , do you plan making videos about SANS holiday challenge 2021 ? I'd like to see your approach compared to mine
@ippsec
2 жыл бұрын
Nope I did not do HHC
@gl3nda96
2 жыл бұрын
KZitem is getting a bit too scary with those double unskippable ads.
@sachinfulsunge9977
2 жыл бұрын
Dude's awesome
@user-ng8tc7zu2m
2 жыл бұрын
Great video , thanks
@hamzarashid7579
Жыл бұрын
Tip: You could just set the bash to suid binary and run "/bin/bash -p", It's better than getting a rev shell!
@ippsec
Жыл бұрын
Better is subjective. By doing that, you allow anyone else on the system to get root privilege. If a pentester did that on an engagement, I'd never hire that company again.
@hamzarashid7579
Жыл бұрын
@@ippsec Just to make things faster I like doing this way!
@obfusec8329
2 жыл бұрын
Great video as usual! Any chance you would ever do a live Q&A?
@pa-vl1kg
Жыл бұрын
@30:40 I don't understand the fuzzing part of it. Just look at the html code on the right panel, the form tag has all the parameters you need to make the POST request.
@TikTok.Video41
2 жыл бұрын
very nice video
@DG-qt3qn
2 жыл бұрын
Hey IppSec, I miss seeing you take Obsidian notes! I would always get great formatting ideas from your videos.
@aaryanbhagat4852
2 жыл бұрын
Whole video was very good but what is that red light at 34:16?
@user-vu4tf3eb9l
2 жыл бұрын
13:13 Mind to explain the stty raw -echo; fg ? Wasn-t enough to have a python shell? How does the shell resumes after he stopped it by hitting CTRL-Z ? Thanks!
@AZANSHAHID
2 жыл бұрын
At 23:54 you did not get proper shell. I also don't. But magically when I start tmux from that she'll, it worked and give me proper root she'll. Always try running tmux if you did not get proper shell.
@cdrom
2 жыл бұрын
the bad character is supposed to be a salt shaker emoji
@retro4848
2 жыл бұрын
Parrot 5.0 is coming, do you have any plan to upgrade your parrot or still stick with this pwnbox?
@itswellick9507
2 жыл бұрын
When? Also do you have any information about innovations?
@retro4848
2 жыл бұрын
@@itswellick9507 Parrot team will have a special meeting to discuss the upcoming version, you can get more information on parrot forum
@itswellick9507
2 жыл бұрын
@@retro4848 thanks
@kalidsherefuddin
2 жыл бұрын
Ok thanks
@thepoop3622
2 жыл бұрын
The kracken tool you are using, is it git kraken? Or is it smth else?
@AUBCodeII
2 жыл бұрын
Hi, Ipp. Do you have any offensive security certifications? If so, which ones do you have?
@kret63
2 жыл бұрын
All they had to do is die, so easy! Also good blueteam experience on that part.
@DeShooter3
2 жыл бұрын
Do you have a similar box video to this with API and not EAR? I want to see an API endpoint similar to this and mining params to get any vulnerability.
@ippsec
2 жыл бұрын
Scavenger kind of does it. I just went to ippsec.rocks and typed wfuzz param. All you do is look for the api to behave differently just as this page did
@jamiegabbay7232
2 жыл бұрын
Ugh my box kept hanging every time I tried to authenticate to mysql with the correct username/password. Any idea why?
@NastyNyde
2 жыл бұрын
Stupid Question, but how do you open the Search in Parrot ? When you search for applications?
@ippsec
2 жыл бұрын
Alt+F2
@markgentry8675
2 жыл бұрын
Execute after read Execute after redirect Execute after relay Hahaha which one is it 🤣 jokes it doesn't matter just made me laugh
Пікірлер: 60