Love your videos. Fun fact (I understand that these boxes aren't supposed to display "best practices" since they are flawed in some way), the API "shouldn't" perform the delete on a GET request. As you saw with ffuf, Web crawlers could perform dangerous actions if this is allowed. GET requests are ideally 'read-only' operations. If this was a pentest, it's something to keep in mind to jot down for the client 🙂
when you were trying to add the ssh key onto root you were at the "insert command" mode, not in "enter username to activate" mode. I think that's why it didn't work. The binary overflow was 🤯🤯🤯🤯, great video !
"wget -o " writes logs to file while "wget -O " writes documents to file. That was the problem with your a.so being UTF-8 text and having an a.so.1 . I really need to work in my binary exploitation and RE skills.
At 1:13:43, we attempted to write an SQL payload on the select option pane. Before selecting option 5, there might be a reason for the .ssh directory not being created.
48:51 Ippsec I notice that you don't take advantage of the tmux clipboard and it's buffer. That's a slight optimization you and I could incorporate (because its something I also just realized while watching you), especially if you're not planning on saving the password/username to a file. Or maybe your system OS also saves the history of clipboard contents, but tmux might be much faster here.
Yeah, that is the better way to do it but just don't have the mental power to keep track of it (or remember to do it) while doing the machine and talking.
Hi Ippsec, i have a question. how can i be better at solving windows machines?! i can easily pwn hard linux machines, but i get stuck in easy windows machines. i know that i should keep trying, but i want to know what topics should i learn to do this. thanks for your golden channel!
One Question Every time i finished a box i whatch your videos. but know i found in two weeks two boxes without a viedeo. Are there any reason why you dont make a viedeo for Nunchucks and Squashed? I mean you made to nearly every box a viedeo.
Love your videos.
Fun fact (I understand that these boxes aren't supposed to display "best practices" since they are flawed in some way), the API "shouldn't" perform the delete on a GET request. As you saw with ffuf, Web crawlers could perform dangerous actions if this is allowed. GET requests are ideally 'read-only' operations. If this was a pentest, it's something to keep in mind to jot down for the client 🙂
Yup, that's a very valid point.
when you were trying to add the ssh key onto root you were at the "insert command" mode, not in "enter username to activate" mode. I think that's why it didn't work.
The binary overflow was 🤯🤯🤯🤯, great video !
This guys has been doing the damn thing for years, what a beast!
The explanation was clear and easy to follow along.Thanks❗❗
Hey Ipp, let's get OSEE before John Hammond does
i think you have years to get it then lol
thanks for going beyond root and extra tips bits \o/
"wget -o " writes logs to file while "wget -O " writes documents to file. That was the problem with your a.so being UTF-8 text and having an a.so.1 . I really need to work in my binary exploitation and RE skills.
At 1:13:43, we attempted to write an SQL payload on the select option pane. Before selecting option 5, there might be a reason for the .ssh directory not being created.
Hey Ipp, I just completed my 30th HTB machine today lol
Nice job! Gratz
Great stuff, as always! Are you using the Dark Reader extension or something different? Keep 'em coming! 💪
48:51
Ippsec I notice that you don't take advantage of the tmux clipboard and it's buffer.
That's a slight optimization you and I could incorporate (because its something I also just realized while watching you), especially if you're not planning on saving the password/username to a file.
Or maybe your system OS also saves the history of clipboard contents, but tmux might be much faster here.
Yeah, that is the better way to do it but just don't have the mental power to keep track of it (or remember to do it) while doing the machine and talking.
@@ippsec Yeah, if you were to use it in your videos it should be muscle memory or the videos will be less flashy and more a podcast .
Hi Ippsec, i have a question.
how can i be better at solving windows machines?!
i can easily pwn hard linux machines, but i get stuck in easy windows machines.
i know that i should keep trying, but i want to know what topics should i learn to do this.
thanks for your golden channel!
Very nice video thank you
Great video🎉
You were only 20 minutes in
That's amazing💪
Hey, are you using Linux as your daily or main desktop distro?
What are the specs of the kracken machine?
One Question
Every time i finished a box i whatch your videos. but know i found in two weeks two boxes without a viedeo. Are there any reason why you dont make a viedeo for Nunchucks and Squashed? I mean you made to nearly every box a viedeo.
They were non-competitive (not a weekly machine) and forgotten about.
@ippsec ok no problem
爱你 ippsec
Push!
hey ipp, What is the model of your keyboard please?
Ducky zero, with cherry reds.
I drive.
Loved the BOF with pwntools. Very educating. Thanks