HackTheBox - ScriptKiddie

[@jamaledineamarir6724]

"As always, we're gonna start over the Nmap. So : -sC for default scripts sV enumerate versions oA output all formats put it in the nmap directory and then the IP address of 10.10.10...."

[@dadamnmayne]

this can take some time to run so i have alllllready run it, looking at the results, we have just 2 ports open.

[@Ms.Robot.]

This was as good as Netflix. Excellent and original digital entertainment. ❤️💋

[@ItsDoros]

Yes dude

[@uaman11]

*better than netflix ;)

[@wavey1236]

your vids always make me so excited to learn, great vid as always keep it up ❤️❤️

[@bidkonic]

I love how you say "Werkzeug", gets me every time. Just for clarity, it's pronounced "Verk tsoik"

[@primalgaming614]

Always great watching these, you're an inspiration!

[@HerbertEduardoFernandezTamayo]

great walk through, how important is to code in bash!, also, it's helpful how to update our netcat shell with capabilities such as scroll and other functions. By the way, I have to review again the process of lateral movement from kid to pwn user and also I couldn't activate my up/down keys on my shell, I could get the flags but definitively I'll rerun this video. All the best and thanks a lot!

[@orlaani1451]

Msfvenom has a vulnerability. What an irony.

[@lowrhyan567]

Using msfvenom for exploit msfvenom lmao

[@yashjha7152]

I used the stones to destroy the stones😂

[@TheKSH991]

@system32 he’s talking about msfvenom not metasploit

[@hadrian3689]

Funnily enough, this box pushed me from Script Kiddie to Hacker rank. So it was like, I was fighting myself? Ba-dum-pshh. Anyway thanks for the video ippsec!

[@ingamer5195]

the irony lol

[@ericpickles8648]

The reason that APK exploit occasionally failed is that the b64 encoded exploit occasionally had a ‘+’ or ‘/‘ character in it, which messed up key tool. The way I got around it was to hex encode the payload instead 👍

[@ertertz9408]

This is what url safe b64 is for.

[@ericpickles8648]

@@ertertz9408 Yeah, but the command has to run on the other box, which didn't have a urlsafe b64 (I think). Thinking about it now b32 might have been an easier option.

[@ertertz9408]

@@ericpickles8648 | tr '_-' '/\053' | That did the trick for me :)

[@pcr9253]

How did you learn this

[@portal_it_id]

Thank you so much for this! ❤️ Much love from Indonesia 👍🏼

[@user-pu4yr7jg9y]

Thank you very much sir ! Really ! I love you !

[@dipnetsec3995]

Very amazing the great master in action!

[@TR1ckY_TV]

you're a legend! thanks a lot

[@dopy8418]

Man that’s a nice set of wordlists you seem to have there for gobuster. All i have is Dirbuster’s default set. Did you create those ?

[@kibouo9302]

check github.com/danielmiessler/SecLists/

[@TheDarthsteve316]

@@kibouo9302 Yoooo

[@xxanonymous6578]

Thanks for the video Ippsec. Hope you could do some more HTB Battlegrounds in the future.

[@McDaniel1]

A master at work 👌

[@rajanipatil34]

He is making videos on free machines let's goooooooooooooooooooooooooooooooooooooooooooooo....

[@sakthis6689]

🤩

[@b391i]

Awesome as usual 😎👍

[@nullnull6032]

This is very very cool

[@philipp__3671]

fun fact: Werkzeug is german and can be translated with Tools in this case

[@pragadeeshkumaran8313]

Half way through , he doesn't look like script Kidde atleast for building a site , and now I just watched till at time snap 17:00 ( Nothin special here )

[@whoamisecurity9586]

Thank you for the video 😊

[@IBOY_]

amazing ,thank you 😊😊😊😊

[@heberjulio6303]

Why not using msfvenom to generate the evil.apk file instead of editing the file with vim? That's the way how i got the shell with a nc listener

[@SinanAkkoyun]

What kind of Linux are you running? :)

[@mozzie6838]

Parrot OS, with HTB's pwnbox theme

[@wkppp4732]

Thanks ipp!

[@ameersabbah6407]

Amazing Videos

[@ItsMeooooooo]

Strangely enough I started exactly THIS box about 30 Mins ago. Now I have to wait to watch the vid until I finished the Machine on my own.

[@anandsajee8949]

cool

[@saketsrv9068]

God bless you ipp.

[@andrewSC]

Do you know any solution for .pahd?

[@unit4246]

What’s is name of editor text ?

[@bigappleplug6021]

And for this reason none of my references are ever obvious. End of my project I go over all callbacks and rename them to something that is harder to assess.

[@susnoname]

this machines is HARD! I understand the scanlosers script after explanation (still not 100% clear but clearer) and I would never exploit it on my own...

[@0m4n1]

😎

[@rumaispp2110]

😎cool

[@stark6314]

😎😎😎😎

[@3rg1s]

Hello ippsec

[@hoshmandctf1]

Only Channel KZbin send me notifications about uploads.

[@mailmaarnaarjan]

GoSpy? Dont you mean psspy?

[@RishabhDeepSingh]

where is that ffuf course?

[@grandmakisses9973]

At academy.hackthebox

[@smartaid8028]

I was only able to get user.txt

[@whoamisecurity9586]

But in my case it demands for the password

[@mmmdyarcavadl9004]

What is note taking app he uses?

[@imranthoufeeque165]

Obsedian...

[@malfoytech4601]

why don't you zoom little bit to see your screen more precisely. From next video onwards it would be great if you gonna do that.....rest things are good 👍

[@ansh2423]

Script Kiddie Don't go on name its not for kids at all...