HackTheBox Battlegrounds - Server Siege (Practice Mode)

[@hnielsen123]

This was great. I love your usual content but it's kinda filed under "studying" content rather than "entertainment" content in my brain lol. But with this the stress of the time limit made it very entertaining while still being educational. I'd love to see more stuff like this!

[@_CryptoCat]

Thanks mate, I'll bare that in mind 🙂

[@golden-oj3mk]

great video. really love the way you explain things is just so thorough and detailed. i also liked the fact the you dont cut out parts where you made a mistakes.

[@_CryptoCat]

Thank you!! 🥰

[@herrkenyee]

I enjoy your content with clear explanations. I love your accent.

[@_CryptoCat]

Awww thank you mate 🥰

[@BenDaSnake]

Great content! somehow i got butterflies in my stomach by just watching you racing for the first game lol. Keep up the good work :)

[@_CryptoCat]

thanks mate! 🥰

[@SoCalAeroViews]

i've been wanting to try one of these and this gave me some good insight! thanks for making this video

[@_CryptoCat]

I had been meaning to check it out for ages myself. Glad I did, really cool mode!

[@yakushitamahacka4199]

Love the Battlegrounds series!

[@_CryptoCat]

🙏🥰

[@SafaretoSaf]

Would love to see a similar video on Cyber Mayhem! Also I would focus less on automating enumeration here as the time limit is very constraining so I would mostly rely on gobuster/nmap and then manually enumerate everything else, that's just me though :) good stuff all around

[@_CryptoCat]

Thanks mate! I'll try and do one for Cyber Mayhem at some point, I need to brush up my [non-existent] defence skills a little first 😅 Good tip, I actually just launched Tib3rius's AutoRecon for the last few games yesterday and focused more on manual enumeration. The time limit really adds pressure and I end up wasting time with indecisiveness 😆 Good practice though, I like it!

[@luxdown7965]

It would be super cool if you could do some Cyber Mayhem, also great video by the way ;)

[@_CryptoCat]

Thanks! Gonna be busy for a few weeks but I'll definitely try and get round to it 🙂

[@0x157]

great vid ! definitely do more of these !

[@_CryptoCat]

Thanks mate 💜

[@TracerPortable]

More!

[@Kinoti9]

Love your explanations man, did you say you'll do a series on portswigger web app pentesting?

[@_CryptoCat]

Thanks mate! I make videos for Portswigger's WebSecAcademy on the intigriti channel: kzbin.info/aero/PLmqenIp2RQciV955S2rqGAn2UOrR2NX-v Planning to cover their gin 'n juice shop on this channel soon as well 🙂

[@Kinoti9]

@@_CryptoCat awesome, will sure check them out. Thanks so much for what you are doing for us not so great hackers lol.

[@danielperloz]

Great video! I’m new to pen test and I have a quick question. I see you use gobuster. Would you recommend it over dirbuster? Regards from Spain!

[@_CryptoCat]

Good question! I generally use gobuster at the start but it's not recursive so if the website is big I might switch to ffuf (which has a recursive mode) or, more commonly, to dirbuster as I like the tree structure UI 🙂

[@danielperloz]

@@_CryptoCat thank you! I appreciate the help :)

[@null_1065]

Please do a cyber mayhem when you have time

[@_CryptoCat]

Will do!

[@Getsbuffer]

Hello Mr. Cat, Why did you filter out all subdomains with size 13669?

[@_CryptoCat]

Hey, good question! When you are trying to find subdomains (or webpages, credentials etc) with ffuf, you want to filter out the invalid responses, e.g. if the subdomain exists, it should have a different content-length than a non-existing subdomain. In some cases, the valid/invalid responses will have exactly the same content-length, in which case we would filter by something else, e.g. the response code or some string the in the response such as "invalid" or "success" 🙂

[@Getsbuffer]

@@_CryptoCat Thank you friend, it's the accumulation of little details like that which make people experts in their craft. Keep up the good work

[@_CryptoCat]

@@Getsbuffer 🙏🥰

[@MADhatter_AIM]

do you have a github, with your scripts ?

[@_CryptoCat]

Yes! github.com/Crypto-Cat/CTF

[@chibiichen]

It would be nice if you can do some boxes without cutting the video to be able to understand your thinking process.

[@_CryptoCat]

Retired boxes? I'm going to do one soon hopefully with a focus on my notetaking process and some tips and tricks for Obsidian. Might do some more Battlegrounds videos first though 🤔

[@boo1251]

Hey why do you try owasp juice shop its like dvwa but more advance

[@_CryptoCat]

Thanks for the recommendation! I have thought about doing juice shop in the past, time has always been the main issue. I've been doing some Web Security Academy videos over on the Intigriti channel so maybe I'll do some juice shop content there after 🙂