Cross Site Scripting XSS Explained | TryHackMe Junior Penetration Tester | OSCP

[@cosmintibuleac969]

For anyone having issues with the final session cookie answer, there seems to be a bug. Here is the correct answer: 4AB305E55955197693F01D6F8FD2D321

[@ursr78122]

Man, thank you very much for the answer, I spent more than hour to come up that task does'nt work... But I was sure that I'm doing everything right

[@unpopularopinion1032]

aaaah no wonder. The bug had to do with the netcat listener (or server as shown in the video) not receiving confirmation of interaction after ticket was viewed right? just want to verify.

[@cosmintibuleac969]

@@unpopularopinion1032 either that or I was not getting the corect cookie for the answer, don't remember 100% accurately.

[@martyduniaud1360]

OMFG, thank you, 1 day I break my head cause that

[@jjjww975]

I could not get the final script to work and bounce back the cookie -- something wrong with the THM network --- everything else worked up t that point

[@unpopularopinion1032]

Thanks for these videos bro. Ive seen two of your walkthroughs already and they are the best/easiest to understand.

[@mohamedahmed-q1m4v]

The way you have explained is really easy and I understand it now. maybe will forget it tomorrow haha

[@RicondaRacing]

that last question had me going crazy for hours, THANK YOU!

[@AC-he8ln]

Thanks, was not working with the nc -nlvp 9001 suggested in the exercise, but worked fine with http server.

[@marosmihok8782]

THANK YOU SO VERY MUCH MAN! I was struggling with this task for so long.

[@mialarssen2627]

Thank you so much Mr Motasem. How do I get that My Notes Library? I`ll appreciate so much :)

[@عربارمي-ج9س]

can you share with as the Manual in 24:51 mins (OWASP+Web App Pentesting) Thanks

[@silentkille4]

learning alot from your videos thank you so much

[@syriamoon2674]

Thank you for the explanation. Would you advise me to learn through the site and buy a paid account?

[@Sleepygayboi9797]

Yes, it is extremely useful, I have done the pre security and complete beginner so far, and am very confident in my fundamental skills now. Def worth.

[@MotasemHamdan]

Yes I would. Its very useful

[@ayoub904]

man ,would like to share with us that scripting note, or we can find it ? thanks alot

[@MotasemHamdan]

Hello, cyber security notes can be accessed through channel membership tier 2 kzbin.info/door/NSdU_1ehXtGclimTVckHmQjoin

[@derastephh]

Hello, how do I know the port for my web server?

[@MotasemHamdan]

netstat -antp | grep apache

[@adminaccount1951]

Hi, I know its a lot. But can you share your obsidian vault for reference.. ? Or kindly make a website out of it if possible.

[@MotasemHamdan]

Hello, online access to notes is part of channel membership kzbin.info/door/NSdU_1ehXtGclimTVckHmQjoin

[@Alternosphere]

Would you be willing to share your Obsidian notes?

[@MotasemHamdan]

Access to the manual can be done through the membership. kzbin.info/door/NSdU_1ehXtGclimTVckHmQjoin

[@Alternosphere]

@@MotasemHamdan brilliant. your content is amazing, keep it up man, big ups

[@RS-uj2yf]

Hm....cant find a link for notes...(((

[@mersadbaradaran9176]

ty my BRO!

[@felipecg6587]

Thank you Sir

[@_think8830]

Thx bro❤️

[@kyawswanyee3309]

can i get your cyber security obsidian note /

[@MotasemHamdan]

kzbin.info/door/NSdU_1ehXtGclimTVckHmQjoin

[@ailson_junior7034]

it only captures its own cookie and not the target's

[@hajarlachhab8851]

can you share with us the obsidian notes please?

[@MotasemHamdan]

Hello, Notes are part of the channel membership. Take a look here kzbin.info/door/NSdU_1ehXtGclimTVckHmQjoin

[@cuneytguclu8547]

@@MotasemHamdan you're awesome thanks

[@FinaLBoSSv0iD]

"fucking finally man"

[@MotasemHamdan]

gangsta style :)

[@huuloc8719]

Great.

[@TuniRex]

sa3b ktirr hhhhhh

[@MotasemHamdan]

hahahaha sa3bbbbbbbbb

[@cybersamurai99]

somehow I am geting a different value on my cookie on the last chalenge. It only contains the session ID cookie I get is : c2Vzc2lvbj01ZTcwZmFkNTRlM2Q2YWE4Nzk4Y2I3ZDNjZGMwMGVlYg==

[@metallical87]

yeah same with me

[@hardiwrites4430]

@@metallical87 same

[@kolesnikov1991]

I had the same problem but finally got a solution. Make sure that is a HTTP connection (HTTPS is encrypted) Second thing. You have to be patient. It takes a while to get cookie

[@cosmintibuleac969]

For anyone having issues with the final session cookie answer, there seems to be a bug. Here is the correct answer: 4AB305E55955197693F01D6F8FD2D321

[@BluD4g]

@@cosmintibuleac969 tryhackme hadn't fix it yet??