I Hacked & Exposed This Fake Website for Educational Purposes - CTF

[@5374seth]

Takeaway: don’t upload your evil incriminating journal to your company’s public web server

[@Artemyst]

Why upload it at all? Pen and paper would protect a lot of companies getting evil shit only 1 or 2 people at the top should know about from coming out

[@vatsaljoshi5788]

M.x lostyckwi have smeeyny

[@akatsukilevi]

Not bad! Just next time put a disclaimer at the start of the video saying that it is a actual CTF challenge Might help people who aren't knowledgeful into CTF's or platforms like root-me to get to know them!

[@antonaparin]

=clickbait

[@onidaaitsubasa4177]

What's really disturbing is that there actually might actually be a real reasearch company that does questionable testing like this on people somewhere out there, it's good they have these simulation websites to test your hacking and programming skills.

[@mikymuky1171]

I was literally just binging a tv series called Fringe. What a great coincidence! Great series

[@user-ge7ep5sc2d]

​@trackme3621and you lack the ability to read

[@mikymuky1171]

@trackme3621 r/whoosh

[@ok-tr1nw]

Mkultra

[@comstate]

Its a ctf examination its not a real website it's just a example of how hackers can show the truth and test your skills.

[@jerrymartin7019]

Always love the little lore tidbits ctf makers include in their challenges

[@victorstegmaier7572]

You sure you haven't hacked accidentally the source code of Fallout 5? That sounds like some Vault-Tec horror story... 😂

[@thehackerish]

😂😂😂

[@filtztr]

i had a stroke reading that and fucking died

[@collectorXVIII]

The real question is how does he know its evil?

[@shouvikkundu8289]

It's a ctf challenge bro

[@jrapp654]

He’s joking bro

[@pitpot2]

its very clearly an evil website

[@pegtade]

Its not a real site, well it is but its made for hackers to hack.

[@hidden_network]

The website was created by him .. just a demo

[@MaxWis]

I wish they did this as security lesson on my uni. just one day of doing this just to get a feel for it and learn how to protect against these attacks

[@Sparkette]

I think "might go to jail" is more accurate. It's not a guarantee; people do get away with it sometimes.

[@thehackerish]

Better safe than sorry 😉

[@aiexzs]

@@thehackerish 😉

[@hermanbenstreng]

most of the times xd

[@vedantkanoujia]

I love how you fool people's while playing ctf & adding *STORY* to it like cherry on cake

[@flatiialt-kx4fo]

" " *

[@chri-k]

People seem to click before they read, so moving "CTF" closer to the front (or shortening the title in general, or putting it in the thumbnail) may help with the clickbait accusations. It may also be getting cut off in some places ( i don't know though )

[@Mahatah]

This directory traversal, to log poisoning, to RCE revshell is very well presented. Also, there are clearly some really interesting command aliases used in this video. If we ask nicely, could we see a few that you have? I noticed "nmapq" and "revshell" in the video.

[@thehackerish]

Sure, I will share them in future videos

[@leafofyume7838]

wow rly didint think it would be so easy to hack a website that has close to none security implementations. scary

[@rodricbr]

very nice little easy ctf. I think I'ma go back into doing them, you've inspired me

[@thehackerish]

Have fun!

[@hartpa]

I don't understand a second of this but respect that you share it.

[@Owl69699]

Bro made this video like im watching a horror movie and i absolutely love it!! \

[@thehackerish]

Glad you liked it!

[@NatureSoulHarmony]

This series is awesome keep up

[@ultralaggerREV1]

The FBI is definitely watching us

[@itsmmdoha]

I love these videos, please keep making these!

[@ClashWithHuzefa]

Man, this hacking looks so difficult. I want to learn like you 😭😭

[@noobidubi8137]

If you wanna learn try "hack the box academy"

[@justincase5228]

I had a friend working in I.T. at a college in Wales and we were talking on the phone. I asked if he thought his system was secure and of course, he's talking shit. So while we were talking I was hacking their website in real time and then email'd him the contents of one of the server's logs. :evil laugh:

[@muneeburrehman547]

😂😂😂

[@justinmorales4635]

Can you check a website and see what you can see on it. It’s a scammers fake website that he uses to scam people

[@TheOverkillSociety]

Damn, this sounds like something straight out of Resident Evil.

[@happyboom-]

great video. I would fully prepare for youtube to take it down though. So please let us know about any community resources you host :) subscribed!

[@MayorMcBluntz]

its a CTF would probably be considered to be educational and not malicious since the site is for this purpose.

[@Gray3ther]

Very instructive, as always. Thanx hackerish! ❤

[@thehackerish]

My pleasure!

[@pitpot2]

love your videos! hope you get more traction soon because your channel is very underrated :)

[@thehackerish]

Thank you so much! Share it with your peers

[@md.mahadi1]

Very nice. Please make a video with java/nodejs website

[@glaszn]

amazing act m8 ... really good and very educational

[@BomMeldingYT]

I keep on learning stuff, thanks

[@ButterflyAdminOfAuth]

Btw Your CTF was Great I learned A lotcz I used same payload on HTB clicker machine but I faile now I know what to do

[@amin7581]

Oh my. This is definitely scary. I can't believe there are company hidden in the world would do this. As a professional website clicker, I can tell you, this is definitely and totally not a dummy site. Very scary indeed.

[@harryhack91]

That journal at the end looked like an SCP

[@Tommi-C]

You had me there for 11 min and 15 seconds 😉😉

[@franceconi]

Excellent work!! Thanks for sharing.

[@thehackerish]

Thank you! Cheers!

[@SSS333-AAA]

i'm so damn confused. enchantment table is something i never learned.

[@thetechdudemc]

The etc/sudoers file properly set up would have prevented the escalation to root right?

[@thehackerish]

Yep, correct

[@Mr.Equinox]

Finally! Log poisoning 😁

[@beast-chan]

i robbed a bank and stole 2M$ for educational purposes 🤣

[@amongusboi2032]

Sounds like chaos insurgency hacker hacking into one of scp foundations websites. Welcome to the splinter group, cyber security dude. 😂😂😂

[@sifuhotman8595]

Clickbait Successful. 😂

[@deadman746]

I know someone who hacked into a rape ring. He got more prison time than the rapists.

[@turbo_marc]

The hacker shouldn't have gotten any prison time. Absolutely ridiculous.

[@Bartyron]

very entertaining!

[@davin2002]

so there was no ssl key, so what was the use of the private key ? , then why post stuff on a webserver, i don't understand the security of this site

[@dreamaker2107]

What program are you using at the digging part?

[@thehackerish]

Web proxy: burpsuite, terminal: Ubuntu

[@Patel_jishan]

Hii sir please please give a fuxsocy details video

[@silkroad780]

Thank you , but if the website outside you Lan network , you do the same ?

[@thehackerish]

if it's accessible through internet, yes

[@michaeltaylor8835]

Good job

[@Faeest]

what app you use to digging in? some kinda postman but it's not postman. what was that?

[@thehackerish]

Burpsuite, or zaproxy works as well

[@paolomontelbano]

This is just a ctf.. why are you making it sound as if this is a real site in the title?

[@taronnersisyan9612]

Dude noone is gonna post something unethical in KZbin

[@artificialviews]

what proxy inspector dashboard is that?

[@dereklee2590]

How do hack website that is doing illegal activity also the users doing illegal activity

[@RenderBenderProductions]

What is the rpogram hat you use in this video?

[@thehackerish]

Just aliases around Nmap and wfuzz

[@justarandomcat7]

🔵 The Hackerish is the best 👏

[@mebmeamarketing7094]

Not understand fully but I enjoy every time. With seen of earning. But I not understand every time. What is money. Why people always money only. Why they do not work for reality. Why they don't need simple ways. Why people going in trouble trouble and troublings..... 🎉 Enjoy your money. But Please take care yourself and poors. You you all. ALLAH BLESS US AAMEEN ❤

[@shareb1t]

Disclaimer: Never put click bait such as video without permission from your viewers otherwise you might go actually you will be banned and forgotten

[@thehackerish]

Well heard, what do you suggest as a title?

[@AliAbbasi-j5i]

can you hack a scammer website who take money from people's by fraud .. reply if you can i will share you link.

[@SujjtaLopchan]

Brother i am in huge trouble i need your help plz help me

[@rgtechyt9267]

Which operation system are you using bro please reply

[@W_Rizz.]

Kali Linux I assume

[@thehackerish]

Ubuntu running on windows wsl

[@thekillercrum]

sick project

[@nolannono31]

what happen if someone go to the url of the website

[@lel0uchfr199]

what's the name of the tool to fetch data (with GET etc...) ?

[@thehackerish]

Curl and Burpsuite

[@ewancadmore3592]

what are the names of those windows he's using to execute code?

[@W_Rizz.]

Terminal

[@legend7066]

what is nmapq?

[@khalnayakgamer6607]

1st yr 😌

[@MasterHacker...]

1דא

[@itwasntme947]

I am root

[@naptimusnapolyus1227]

Delightful. 🎩 ☕🗿

[@MikeRegan-z3v]

Sir good day to you l was watching your videos but l should like to ask about a certain app which l don't know if it's real or fake app

[@MikeRegan-z3v]

He research l made almost people are saying that it's working but honestly speaking according to you hackers you can tell us the truth

[@MikeRegan-z3v]

So how can l reach on you or how can l contact you and l give you full details sir, l will be glad to hear from you

[@thehackerish]

You can dm me on Twitter

[@MikeRegan-z3v]

But guy why do you always send us to contact you through Twitter, Instagram, Telegram why do you give us direct numbers or contacts to reach up on you

[@PythVR2]

when you put educational purposes at the end of the law the just ignore what your doing.

[@thehackerish]

Not just that, the website itself is for educational purposes only 😉

[@0RIPPER0]

Dyaumn man !

[@stormgaminggg]

so you can basicaly install a virus and run it using this to destroy the server?

[@thehackerish]

Yeah, once root, you can do pretty much all you want. But in penetration tests, you always take your customer's data and availability into account

[@SomeDudeCauseYes]

twist: he hacked a evil site, create but remove security, then do a educational vid on it. (Joke btw)

[@ghost_ship_supreme]

5:40 wait… what did he do here?

[@e.v.a.l.s]

i dnot get it

[@Vurkman]

can u do it on a virtual box?

[@thehackerish]

Yes, from vulnhub.com

[@OligoST]

Spooky story

[@deatheternal720]

why are you recording in 2 fps

[@holl7w]

The video is not in 2 fps

[@gocciolabtw]

0:13 then why are you doing it 💀

[@0xdt0x]

Is this genuine data of them... or you just crafted iy yourself, i mean the experiment sounds russian

[@thehackerish]

No, this is a capture the flag designed to test hacking skills, and has a story behind

[@harrymakongwa1147]

How do you know what you know ..

[@thehackerish]

Everything is available online to self-learn

[@yusufermanto1540]

is the life expectancy gonna be Pay To Win? i prefer Free To Play

[@GrumpyGillsFishing]

Beautiful lab 😂 I love it

[@jimschips254]

Pro tip: this vid smacks in 1.25x speed

[@alexjames1575]

Hey 👋 I want to talk with you in private conversation

[@Steve-xb7dn]

this stuff is years old.....

[@mikehunthunt8269]

You have your own ip 😔

[@devviz]

who tf encode experiment logs in a flag.png file?! ridiculous, unrealistic

[@thehackerish]

It's a ctf

[@IBadAtEditing]

POV you don’t understand that even in unrealistic CTF’s, you can learn a thing or two to apply to real world scenarios 🤯🤯🤯🤯

[@traida111]

I believe you already hacked it, then repeated the steps again while recording. I mean, in this type of thing its how to make good content. well done

[@johndavemontalvo7236]

naay kahibaw mu hack dri cebu? willing to pay

[@codename_ghost1676]

PLEASE TELL ME THIS IS SATIRE

[@lpsfairylightz6468]

LOLL IM STUPJD IDK ANYTHING ABOUT CODE AND I WAS LIKE ILL WATCH GHIS IT LOOKS COOL I THOUGHT IT WAS REAL AND THEN THE REVEAL STARTED AND I WAS LIKE 💔💔💔

[@purple-47]

5:23 is that your IP?

[@thehackerish]

Nice catch, vpn

[@purple-47]

thanks.@@thehackerish

[@alexgamingyt-cj1bf]

hello fbi watchlist!

[@iskrassupercoolchannel]

hi

[@bepisenjoyer]

omething has gone wron

[@z3r0c00l2]

Fake

[@tilde00]

its a ctf walkthrough LMAOOOOO

[@Biejoy666]

And don't be evil again okay😊

[@ImDuck42]

can you hack discord servers and give everyone free Nitro ? (for educational purposes of course)

[@thehackerish]

Haha, unfortunately no. It's unethical

[@Lynixity]

it is lel >:)))))@@thehackerish

[@realPikachu1p]

Ngl a link name like that already screams scam lol

[@alvaromoe]

Discalimer

[@vitorstreetboys]

hahahaha

[@wereisaly]

Lmao just hack any website and say its for “educational purposes“ problem solved

[@thehackerish]

It's not just any website, I don't hack things I am not authorized to

[@Kwijtamine]

bruh