Authentication Bypass | TryHackMe - Jr Penetration Tester

[@jdhaynes7402]

That was really helpful for me on the "Authentication Bypass - Brute Force" step where we're supposed to get a username and password. I had saved the output for the 3 usernames to a file using the "cat > valid_usernames.txt" at the end of the ffuf cmd. Then cleaned up the file using nano. Didn't work. Then I created the file from scratch (touch valid_usernames.txt) and added the 3 names manually using nano. Still didn't work. Finally I saw in your video that you used sublime - as soon as I used sublime to create the file - it worked. Not sure why the "cat >" then using nano method didn't work though - that has me curious. Thanks for your help!

[@wiredogsec]

I’m glad you found it helpful! Have you tried using ‘echo “users” > usernames.txt’?

[@climbing_for_dollars]

i guess like my question would be how would we know the steps without the instructions? just from practicing?

[@wiredogsec]

Which part of the video are you talking about?

[@climbing_for_dollars]

@@wiredogsec I meant like i understand the whole video but i only understand it because it shows you how to do it all. But if i didn't have it showing me the steps i know i couldn't do it. I guess i answered my own question. Just have to memorize and practice.

[@climbing_for_dollars]

@@wiredogsec I'm just trying to learn as much as i can. I'm in a cybersecurity training program for new people trying to get into the industry. It's a program by a online college through my work. At the end of the program i get a voucher (assuming i pass the class) to take the comptia sec+ exam.

[@wiredogsec]

@@climbing_for_dollars The instructions are in each task. Sometimes, you may have to use outside resources or make modifications to the commands or arguments.

[@climbing_for_dollars]

@@wiredogsec Thank you. Your video is very helpful