HackTheBox - Schooled

[@weaslie]

Thanks again for a great video :D ! Just a quick tip; if you have a lot of columns or data in MySQL, you can use \G instead of a semicolon after a statement to display the results vertically (eg "select * from mdl_user\G")

[@alex-bm6iu]

Yo thanks, that's a nice tip.

[@LostExcalibur]

Thanks you ippsec for your amazing uploads, i really love your videos and i always learn so much !

[@chiragartani]

Enjoyed it 👏👏🙏. You are legend.

[@obfusec8329]

IppSec, you are a legend.

[@wchen2340]

just what i was waiting for

[@girirajr4946]

My all time fav one...who teaches us about real hacking without geeting any fee... ❤️❤️❤️ Love from India ippsec....is there any way to get intract with you ...coz iam gonna do OSCP ..I just want u as my mentor ippsec bro...if it's possible iam waiting...

[@sand3epyadav]

Nice Video Ippsec Sir, Happy Tearchers day sir.

[@netbin]

Thanks for great Content Ipp!

[@sumanbhardwaj9883]

Sick video sir!

[@iamvasbo]

What the hell dude... Your mind is.... not human mind lol. I just exploded

[@GaryFrancis-q3r]

I do not understand how you did manage to "steal" the cookie from Manuel Phillips. The XSS you created is run on your personal "user account" page, no? Can you explain? Cheers

[@ippsec]

If you look at the HTTP Access Log where I copy the cookie from, you'll see Schooled's IP Address. There was an automated job on the box to simulate manual phillips accessing your profile.

[@GaryFrancis-q3r]

@@ippsec Thanks for your reply. Yes, that makes sense :) Cheers! And thanks for the very nice contents!

[@alexo01-k8w]

in that moodle version the chat from you to the admin or another random person is vulnerable to xss :)

[@maxmusterspace6037]

Not sure what everybody has against nano. I wrote my OSCP report in nano. :D I mean, I wouldn't do that ever again this way - but I passed. Nano isn't too bad.

[@ippsec]

I think that you just lose a lot of the benefits of a TUI (Text User Interface) in Nano. The major advantage of vim vs other things is being able to quickly do a lot from the keyboard without clicking around.

[@maxmusterspace6037]

@@ippsec Yeah. I agree. Once I moved to vscodium to write code or writeups, it went way smoother than with nano. Probably not up to par with vim. But I can't be bothered to learn it.

[@x00-p3z]

What happened to the thumbnail ippsec??

[@ippsec]

Just not home to fix it

[@x00-p3z]

It's ok dude.. We don't judge a book by it's cover. Your video is just mind blowing, as always.😍

[@yamunaudayanthi3266]

Where is that walkthrough of how you created Gobox?? Ahh?? 🙄😒

[@ca7986]

👌

[@tech0494]

Ippsec ❤️

[@bech2342]

write-up we will ignore it, but you already read it 🙈

[@philipp__3671]

oh, im early today. WUHUU

[@tech0494]

Those who didn't get reverse shell using bash rise ur hands

[@thatcrockpot1530]

25:20 mood lmfao

[@ajaymandal2560]

Damm,still too much to learn😞