Custom Wordlists & SQL Injection - GuidePoint Security CTF (Belle)

[@XiSparks]

John Hammond, you rock! I wanted to tell you that in addition to helping Mr KZbin Algorithm find your videos.

[@montgomery4340]

I have learned a bit from you so far, great content buddy!

[@lonelycount1]

21:42 this part is epic, true work of art here :|

[@CB-gi7kd]

Great video man. These help out a lot especially if you do them straight through, to see the thought process of a senior security professional.

[@fabiancostamoling]

Master John, thank you again... love the vid

[@sammo7877]

Great to follow the journey through the box

[@0101UnknownUser]

You are learning still 😬. I am sooo lost 🤣🤣. Love the vids, just getting interested in all this stuff and the beginner lvl baffles me.

[@AsmodeusMictian]

Nice vid man. Really interesting to watch you work. Thanks!

[@angelineguo7527]

John Hammond tu est vrement tres tres fort

[@claudiafischering901]

Cool video. I learn new things - great. Thanks John Hammond!

[@mcncyo]

just starting out and learning alot. Thanks

[@seclilc]

Incredible stuff as always, John

[@cooliceman0001]

Great content! I love learning from your videos. Super helpful

[@michel_dutch]

Very cool to watch, keep it up!

[@popooj]

Man!! that's just impressive....

[@subhamkrnavneet7110]

sir.. i have work .. bt still m watching.. like fuck it.. John Hammond is the new netflix 4 me

[@shadowconn4376]

Thanks for the walkthrough🔥

[@gamlielhernandez974]

Thanks to you John, you rocks!!!

[@LapisOnTheMoon]

loved the vid :D first time catching a premier from you lol

[@goodboy8833]

John please please plzzz make a video on Request Smuggling 101 plz, i want this attack explanation from u bcoz i feel u are best explainer.

[@colinschaffer320]

As always really informative video! Could you maybe do like a tutorial or introduction video for pwncat and show your tricks and usage with it? Would be really awesome I think!

[@mi2has]

quality content

[@aakashgautam3851]

Nice video 👍

[@SecurityTalent]

great

[@jameselliot9114]

damn you're a wizard

[@sohailsaha7427]

I think getting a root shell was possible. Correct me if I am wrong, but since `cat` was an SUID binary, it could've been used to overwrite the `shadow` and `passwd` file to add a new user, then overwrite the `sudoers` file to give it full sudo access to the system as root, then simply `su` to the new user, and do cleanup later on.

[@pwndumb2903]

Hi, this ctf has some webpage of past events ?

[@padaloni]

could have cat /root/.ssh/* and maybe found a private key? who knows. nice vid dude!

[@mattsmelser]

I was thinking the same. Or possibly crack Belle's hash from /etc/shadow and then privesc from her access level.

[@user-lk5qz4wx4q]

Delphine? :o

[@ichigok2594]

Hi. How did you switch from remote to local when using pwncat?

[@nikohegeheiskanen]

I think its ctrl + d

[@asitbiswas6217]

make a video about advanced linux commands

[@_JohnHammond]

What Linux commands do you consider "advanced"?

[@asitbiswas6217]

Every KZbinr make video like common linux command

[@NullPxl]

​@@asitbiswas6217 The most well-known commands are well known for a reason. For example "awk" is really commonly used because of its versatility, and to use it *well* you'll need to learn a lot of syntax (i.e, it's not necessarily the command itself, but how you use it). If you're looking for something that's less well-known you can search up " linux tool" and 99% of the time it'll have something.

[@anubhav9476]

@@_JohnHammond Hi John, I instead suggest to make a video on data exfil methods like with nc and other tools. Kind like what we can use during a HTB machine. Great video as always ❤

[@bhagyalakshmi1053]

Ok full eg simple

[@bhagyalakshmi1053]

Home key /ind key

[@hellcatchuck2723]

password123 if not password it's super protected.

[@AmanSharma-il3hd]

....u said this was beginner ...handholding penetration testing ..........

[@ARZ10198]

Ummm hello I guess

[@djosearth3618]

thank for these man!! edit: I've been using *nix/bsd since mid 90s and your skills really 10^10 increased my pen tools knowledge base. -haxbwn0r!-