Tib3rius

Пікірлер

@JohnRodgers7390 Сағат бұрын

Sometimes, what you know is not enough to get noticed above the crowd when trying to get a position; it is who you know who can open that door.

@madara55655 2 сағат бұрын

amazing walkthrough

@Tib3rius 2 сағат бұрын

Thank you!

@TheRealVegapunk 5 сағат бұрын

I'll start doing this soon, I'm in need of a career change 😄

@Ox8jOrn4r8Or93 10 сағат бұрын

Great walkthrough Tib3rius. Keep up the good work!

@Tib3rius 5 сағат бұрын

Thank you!

@alienboy689 10 сағат бұрын

First time I've really had Burp explained so well 🐥

@Tib3rius 10 сағат бұрын

Thank you! 🙏

@salmakhaled500 12 сағат бұрын

amazing explanation appreciate it

@Tib3rius 5 сағат бұрын

Thanks!

@orbitxyz7867 20 сағат бұрын

What is twitch

@Tib3rius 20 сағат бұрын

It's a streaming platform I use: www.twitch.tv/0xTib3rius

@_NET_ Күн бұрын

🔥🍿 Premium Popcorn !!

@dzabdo8017 Күн бұрын

Great looking forward to it 😊.

@vipinsharma1984 Күн бұрын

😊

@gamehacks5814 Күн бұрын

you are better than these other plebs, best walktrough!

@santhoshurs8213 2 күн бұрын

No other youtuber had explained any task like u did.. understood every small details.. very well explained.

@Tib3rius 2 күн бұрын

Thanks! Always enjoy doing these walkthroughs!

@Jussi-s5n 2 күн бұрын

Incredible clarity and simplicity in your teaching, yet packed with detailed information on all the essentials. Thank you for this. I'll definitely check out what other content you've created!

@Tib3rius 2 күн бұрын

Thanks, hope you enjoy!

@Lahmikhara 4 күн бұрын

Great video so far, it's really giving me a lot of insight I'm not getting from simply going through the rooms on THM. I did manage to figure out a different (although much more boring) way of finding the flag on 38:39. I edited the python code to: import os; print(os.popen("cat app.py").read()) The flag was in the result Must honestly admit that in the last task even after trying to follow along I have no clue how you got the extra flag. I get the basic idea but what are the %3*? codes for when adjusting the url, and how did they get there?

@faheema4602 4 күн бұрын

Sort of up, above & around then scroll down 😂 Last-Byte Syn Attack Explanation 👌

@Tib3rius 4 күн бұрын

If there's a feature which temporarily disables the changing highlighting, I wanna know about it. 😅

@MannerStyles 5 күн бұрын

yoyo 1st~

@MannerStyles 5 күн бұрын

liked/subbed/followed/incredible

@Tib3rius 5 күн бұрын

Thank you!

@Jayden_Sewall 5 күн бұрын

What is the name of the lock set

@mohammadhosein77 5 күн бұрын

Thank you so much for amazing contenet!

@Tib3rius 5 күн бұрын

Glad you enjoy it!

@JosiahAyogu 6 күн бұрын

Wow😮

@narsimharao8565 6 күн бұрын

last one is SQLI /page/edit/1'1+1'

@lukerzonca5754 7 күн бұрын

How would you go about getting code to determine if a race condition is possible on a real web app? I know it's provided here to help learn, but is it just a guess and hope it works in a real world scenario, or are there more effective ways to see what the code is doing?

@Tib3rius 7 күн бұрын

Great question! Yeah, on a real engagement you are unlikely to have access. It's more about noticing the potential for race conditions in functionality and setting up the conditions where an attack might work, then testing to see if it does.

@T-Rex0711 7 күн бұрын

I'm so glad I watched this video in addition to reading the room. Your explanation of last byre sync with wireshark was great

@Tib3rius 7 күн бұрын

Glad it helped!

@JohsonClint 7 күн бұрын

this a lots of information

@imrcrabs3528 7 күн бұрын

just add in end '1'='1

@shivamnaik7857 7 күн бұрын

Hi what does:Where balances shift and numbers soar, look for an entry - an open door! mean? what should we look for?

@JosephBrady-u8c 8 күн бұрын

For the past 2 AoCs, your videos have been the best. You add a ton of value to the lessons they provide, thanks for going in depth and thanks for making these walkthroughs.

@Tib3rius 8 күн бұрын

Thanks! Appreciate the kind words.

@Dr4hcir 8 күн бұрын

Very informative video. Great work, thanks!

@Tib3rius 8 күн бұрын

Thank you!

@KaungKhant-yz8nd 8 күн бұрын

OMG the more I participate in advent of cyber 2024, the more gold I dig. Another great resource you tube channel for me.

@KaungKhant-yz8nd 8 күн бұрын

This walkthrough is special.... I couldn't help to close my mouth wondering every details your are explaining.. Thank you

@Tib3rius 8 күн бұрын

Thank you!

@mecyber6316 8 күн бұрын

in the task is says send OVER 2000$. and i did as told to do and me end up not getting the flag. how to refund glitch account?

@Tib3rius 3 күн бұрын

You can't refund the account as far as I'm aware. You need to reset the machine. I believe to trigger the flag you need to use the exploit like I did in the video. You probably need to make the end balance -$2000 or something.

@ramakrishnant7784 8 күн бұрын

I totally agree with you on this!

@psycho_iffe8828 8 күн бұрын

Savage 😂

@wassimmariamable 8 күн бұрын

Thank you for that. I just learnt something very new to me. Well done Tib3rius. Do you have any videos on Burpe Suite?

@Tib3rius 3 күн бұрын

I have a web app hacking playlist that contains a few videos on Burp! kzbin.info/www/bejne/g5OUmayciruSorc But also check out my live streams, we use Burp a lot. I stream most Mondays and Wednesdays, and you can find the recorded streams on the Live tab of my channel!

@atharvavlogs1446 8 күн бұрын

Awesome video.

@Tib3rius 8 күн бұрын

Thank you!

@camerawman 8 күн бұрын

Saved some time by going through this walkthrough . Thanks for this

@Tib3rius 8 күн бұрын

You're welcome!

@DaniSpeh 9 күн бұрын

And again Tib3rius explained the topic exceptionally well, going above and beyond by not just covering the basics but also diving into the 'why' and 'how' behind it. His videos are always so informative, and the streams are especially great for learning. Keep up the amazing work!

@Tib3rius 9 күн бұрын

Thank you!

@c0ri 9 күн бұрын

Nice to see you doing one of these Tib3rius! I've been following your walkthroughs for a few years now. You always go the extra mile and explain all the details.

@Tib3rius 9 күн бұрын

Thank you!

@Zelousfear 9 күн бұрын

Thoughts

@Tib3rius 9 күн бұрын

Thank you for following instructions. 👍

@heybevis01 9 күн бұрын

Aww you gotta give him that TOCTOU

@Tib3rius 5 күн бұрын

Can I steal this for a sticker? 🙏🥹

@newfaith912 9 күн бұрын

Great it does not work for me. Luckly devs that made code dont check if i transfer 1000 than 2000 so it goes to negative anyway. Cheese way to get flag but i just cant replicate attack. It does 10 requests i get 10 response and only first gets processed. Did same with attackbox and it worked. Now i have even less clue why it didnt work on my personal vm.

@Tib3rius 9 күн бұрын

Weird! Yeah not sure why it won't work on your personal VM. Interesting cheese, I thought the code did prevent that, but maybe I misread it. 🤔

@lynettestevenson6406 9 күн бұрын

Thanks! I loved the additional information, like showing us Wireshark as well.🙂

@Tib3rius 9 күн бұрын

Thanks! Glad you enjoyed!

@ACatttttt 9 күн бұрын

thanks for to me. for you see i have no eyes

@zigaudi 9 күн бұрын

Great video and explaination.

@Tib3rius 9 күн бұрын

Thanks!

@Zdenon133 9 күн бұрын

There is an issue with last task (glitch account). When I duplicated the tab from the previous task and swapped the cookie session, account number and amount for proper values, the Balance went to 0, but no flag was provided.

@Tib3rius 9 күн бұрын

I would go join the TryHackMe discord where someone from support should be able to help. Alternatively try resetting the box and trying the attack again with the actual request instead of swapping out values etc.

@Zdenon133 9 күн бұрын

@@Tib3rius Thanks! I wanted to check if it was actually possible. If I were to provide a higher value than 2000 and go below 0, the flag might appear. Unfortunately, in this scenario, I'm also unable to duplicate requests, as the balance cannot process more transactions when it is 0. :D

@Tib3rius 9 күн бұрын

Ah I understand what you mean now. Yes, if the balance is at $0 before you start the last-byte-sync attack, it won't work. This is due to a check in the code (see the code review section in the video). If the balance is > $0 however, the attack should be successful!

@Zdenon133 9 күн бұрын

@@Tib3rius Ohhh... I think i should get a new pair of glasses :D "over" 2000 :D well nvm then :D Thanks !

@digvijaynetke9805 9 күн бұрын

turbo intruder not installing

@Tib3rius 9 күн бұрын

Can you access the Internet from the Attack Box? If you aren't subscribed to TryHackMe I think the Attack Box is limited. Not sure if the same is true for AoC though.

@eliyartursun 9 күн бұрын

Try "Last-Byte Sync in Action!" It is fast and better with the grouping, and it will help you find the flag.

@Tib3rius 9 күн бұрын

@@eliyartursun in the video I compare last byte sync to Turbo Intruder. I think they are trying to replicate that.

@Lahmikhara 9 күн бұрын

While the challenge was pretty easy, even for a beginner like me. This video really added a lot of value. I loved how you went into detail explaining how this attack works. Thank you

@Tib3rius 9 күн бұрын

Thanks!

@vixytech_cybersecurity 9 күн бұрын

I enjoyed every byte of this video. Well-done and Thank you. Well explained.

@Tib3rius 9 күн бұрын

Thank you!

@sridharjayadavan7979 9 күн бұрын

Hi, Your explanation is awesome and i could able to understand the last byte syn. Thank you.

@Tib3rius 9 күн бұрын

Glad to hear it!

@KumManish 9 күн бұрын

Ah thanks Man ! Your videos are always with a superb quality 🐳

@Tib3rius 9 күн бұрын

Thank you! Love making them for y'all!

Ең жақсы KZbin

Пікірлер