HackTheBox - Keeper

[@mathiasensimon]

Rødgrød med fløde is a Danish tungtwister for joking with foreigners. It is also a dish but it's like an inside joke in Denmark

[@AUBCodeII]

Ipp's a keeper

[@AUBCodeII]

Hey Ipp, who's your favorite SpongeBob character and why is it Squidward?

[@0xrod]

This was my first htb, excited to see here

[@marsanmarsipan]

was just searching for CVE's for this one, but failed to look into default username and passwords.. Another great video, Ipp!

[@Ivo--]

I completely missed the password in the user comment, but got code exec through RT itself, you can define a custom action and run perl code. Also I was very lazy and just ran the windows version of puttygen through wine.

[@superfadelito]

I was trying to do that but didint use pearl code, could you share where you found that cve? Didint find anything more specific, just vague explanations

[@Ivo--]

@@superfadelito it's not a CVE, it's a feature. They're called Scrips in RT. You can assign an action to a trigger for example when a ticket gets a comment, you can run a scrip.

[@MygenteTV]

what?! crazy, I remember writing a whole article last year on how to extract those password from memory to then exploit them. now i see this wrong and even a gitbuh python script for it. Lmao

[@johnsaintfleur3204]

Thanks, this video really helped me out!

[@eklypzn]

yeah, I'm glad I just logged into commando for this box, but It's nice to see how I could have done it in linux.

[@azizhankaya8694]

can you also do new blockchain challenges

[@jondoe79]

Every detail matters, I'm interested for sure no matter how long the video is

[@tg7943]

Push!

[@sand3epyadav]

Miss u and love u sir

[@0xazyz897]

very nice

[@sotecluxan4221]