Segfault is likely coming from a buffer overflow. C arrays don't auto resize like c++ strings, so 'char fullname[] = "/tmp/" ' only allocates 6 characters, when using "strcat" it will overwrite the memory after "fullname"
@haridass2208
3 жыл бұрын
Ippsec has big heart 💓 Teaching to everyone :)
@Ms.Robot.
3 жыл бұрын
Thanks for making the process for navigating this route clear. ❤️💋
@HellgateDragon
3 жыл бұрын
assuming the inotify code wasn't broken to begin with, the seg fault could stem from the fact that 'char fullname[] = "/tmp/"' only allocated 6 bytes for this char-array, but 'strcat(fullname, event->name)' not being safe, extended the array, possibly overwriting something more or less importent.
@markgacoka9704
3 жыл бұрын
Ippsec does rock!
@TR1ckY_TV
3 жыл бұрын
Huge thanks dude you break it down and make easy to understand
@dipnetsec3995
3 жыл бұрын
Everyone who is starting had to make this machine, a lot of knowledge!
@D--ParmarMalay
3 жыл бұрын
seriously discovered a amazing yt channel
@bugr33d0_hunter8
3 жыл бұрын
YT . . . ? Youth training. . .?
@invertedgoogle2653
3 жыл бұрын
Love all the tenet references
@j3r3miasmg
3 жыл бұрын
To fix your "auto tab/space situation" writing code, you should use "set nopaste" after you paste the code using "set paste" in VI.
@PhotoSlash
3 жыл бұрын
this method is way harder than the one I used, but lots of good stuff to learn :)
@younesmohssen8158
3 жыл бұрын
Howd you do yours?
@johntheocharis573
2 жыл бұрын
why would you ever dislike any of his videos?
@ChrisSoehnlein
3 жыл бұрын
I like hearing your annoyances with certain privesc methods on boxes. Like when people ask about Backup files instead of checking and writing blatantly obvious exploitable scripts. Like this Medium was so much easier then a lot of other Mediums which sit more at the Hard category.
@rohanmahakal8113
3 жыл бұрын
I am spending hours to do What this guy is doing in 5 min
@JohnSmith-he5xg
3 жыл бұрын
Don't beat yourself up. 1) He's been doing this a long time and is very skilled 2) He preps beforehand, so you're seeing it super smoothly presented.
@davidwonder3421
3 жыл бұрын
@ippsec when will you start streaming with ZAP?
@RomainRollot
3 жыл бұрын
Thanks !
@user-ru6qb8hq2d
3 жыл бұрын
cool man 👍🤙🤙👌
@0xfrijolito
3 жыл бұрын
i think the seg fault is because fullname is only 6 bytes and strcat write more that 6
@mrwancool8648
3 жыл бұрын
from where i can get that Arch Linux htb thing ?
@rozbrajaczpoziomow
3 жыл бұрын
If you mean the OS, ipp is using Parrot
@themasterofdisastr1226
3 жыл бұрын
If you are looking for a pentest OS, Blackarch is a thing I heared, but didn't confirm, as its Arch.. and I cannot be bothered to figure out how I can display the bloody Desktop
@mrwancool8648
3 жыл бұрын
@@rozbrajaczpoziomow but i think the one he's using is custom made i used Parrot before it can be slow sometimes
@mrwancool8648
3 жыл бұрын
@@themasterofdisastr1226 i will test it thx
@k_xx
3 жыл бұрын
@@mrwancool8648 its definitely parrot, with a few custom modifications here and there...
@Ruhgtfo
3 жыл бұрын
28:00 CVE-2015-1862 ?
@ategsartanddailyvlog
3 жыл бұрын
Hello...i must know what ipprock is!
@VeryDampTowel
3 жыл бұрын
at 10:12, how did you search for 'discover-backup'? Is that a bash function?
@x.plorer
3 жыл бұрын
tmux feature
@VeryDampTowel
3 жыл бұрын
@@x.plorer sweet ty. I’ll look into it
@lawaace1056
3 жыл бұрын
No way Ippsec a human , born to hack , I mean literally
@davidbeiler6364
3 жыл бұрын
god how do you know to do all this?
@cipher3966
3 жыл бұрын
Are these available for non-vip users?
@ChrisSoehnlein
3 жыл бұрын
Yes, whenever IPPSEC releases a video it is because the box has retired and normally available at the free tier.
@cipher3966
3 жыл бұрын
@@ChrisSoehnlein But is it only possible on the Hack the Box virtual machines? It does not allow a reasonable amount of time for free users
@ippsec
3 жыл бұрын
The box is freely available for 15-20 weeks when it is live and then once it retires and writeups are allowed it remains available for free for 2 weeks.
@cipher3966
3 жыл бұрын
@@ippsec But I can't complete them without allocated time? It always tells me it is used up
@markgentry8675
3 жыл бұрын
ippsec every time he write the bash reverse shell. types: 0>&1 says: zero at and one me: at? 🤔😂
@harnoorsingh8520
3 жыл бұрын
Hey ippsac, I am little new to whole CTF thing. So can you please tell me a way to make best use of your videos ?
@michaelod8841
3 жыл бұрын
LOL
@ertertz9408
3 жыл бұрын
I suggest watching a few videos before starting so you get an understanding of the process. Then i suggest playing boxes yourself and watching ippsecs walkthrough after. Other writeups can also always be interesting. If you're stuck don't be afraid to ask for hints. Once you get it, ask yourself "Should i have known this?" If yes, then learn from your mistakes, if no then you just learned about another attack vector. Good job!
@harnoorsingh8520
3 жыл бұрын
@@ertertz9408 thanks a lot for a reply I will keep that in mind.
@harnoorsingh8520
3 жыл бұрын
@xPrimalVictor7x I was doing that so that's why I was asking is their order to make best use of ippsec video. Do Tell me which order u follow?
@medoangel8370
3 жыл бұрын
Start watching his oldest videos first he explains new things better the first time then expects u to know it
@philippg4261
3 жыл бұрын
It's not retired yet tho 👀
@DHIRAL2908
3 жыл бұрын
It's available for two more days as well. But the points won't count if you solve it now!
@dopy8418
3 жыл бұрын
Can’t install Burp on my Rasp pi 4 and it drives me crazy. Sorry for venting here.
Пікірлер: 56