HTB Cyber Apocalypse - cURL As a Service

Moving your first steps into hacking? Start from HTB Academy: bit.ly/3vuWp08
Hungry for more hacking training? Join Hack The Box now: bit.ly/331nQCl
For more content, subscribe on Twitch! / johnhammond010
If you would like to support me, please like, comment & subscribe, and check me out on Patreon: / johnhammond010
PayPal: paypal.me/john...
E-mail: [e-mail]
Discord: johnhammond.or...
Twitter: / _johnhammond
GitHub: github.com/Joh...

[@NateRoberts]

You say “you talked too much” but for a beginner your deep dives/verbosity definitely help someone like me. So it’s greatly appreciated, thanks so much for the content.

[@jwoo13]

I really appreciate you "thinking out loud" as to what you're doing at each step; it helps a lot of us learn as that fits our learning style.

[@vanshajdhar9223]

Yes I agree

[@mjtonyfire]

John, man... Do NOT stop being verbose. Your train of thought whilst solving a problem is INVALUABLE. I don't think there's another youtuber out there that gives us this fine grain critical thinking regards hacking/CTF/stuff. I'll watch one of your vids from start to finish the first time, then I'll be going slower through the next play through, taking notes, following along... This is the best way to learn. Keep going. You've just earned another patreon. Thanks man.

[@Zygorg]

Yes

[@YeffRamos]

love how descriptive and verbose these are actually... even if we use curl every day it's nice to see somebody go in-depth with it.

[@lepsycho3691]

I really like to hear your thought process, it gives me a lot of insights on how to approach a challenge like this!

[@tsustyle6263]

I've said this before and I'm going to say it again. I learn more in 30 minutes watching John's videos than I do in 3 hours with any other teaching medium. Incredible job as always. Thank you.

[@theITGuy-no3nt]

@johnhammond Sorry for the second comment, but this is like the 10th time I have heard you apologize for being verbose in explanation, video length, or for "fumbling" through a challenge. I can not state strongly enough that those things are *precisely* why I watch your videos, and I feel that I am not alone. I do not give a fetid pair of dingo's kidneys about the a-b-c steps of solving any particular challenge; it is the thought process that leads to the solution that interests me. I enjoy watching you beat your head against walls, as would anyone who ever pounded a keyboard in fury whilst screaming "What the *actual* $%@# ?" Keep it up. What you are doing works.

[@hayaanrizvi]

Exactly, couldn't have said it better myself

[@theITGuy-no3nt]

@@hayaanrizvi Thanks

[@AustinReed1]

John I had to hop on here and leave a comment, you are great man keep up the good work, I just saw one of the CTF's you were in and it was obvious they were being assholes, muting you on purpose, being snide then dismissing you at the end was shitty and inexcusable. Good for you for taking the high road and being tactful during the whole event and never uttering a negative word about that guy. Keep up the awesome work, the world needs more people like you!

[@JimmyGeschwind]

I like that you go through and show the whole process and not just jump on the solution. I feel that I learn more from that approach. Keep it up!

[@ez-it-solutions9128]

It's very difficult to hit every audience and talent level but these are the kind of video's worth paying for! A shorter, summed up version that skips specific steps or lacks the long-winded explanations is what most video's provide - but you provide the most thorough and absolute content! Keep it coming - What you call long-form or verbose is what makes it easy for everyone to follow.

[@_CryptoCat]

thats cool you got the -T flag to work! i was playing around with it for a while before eventually solving with file:/// 😀

[@telnobynoyator_6183]

I though of the same thing ! So file IS a solution...

[@steps0x029a]

Love the talking-to-yourself and thinking-out-load approach, it really helps with understanding the process!

[@peterchari3839]

Great walk through video. Clear explanation. Its very easy to follow.

[@Devinatron]

I feel dumb now seeing how simple it was. I got too far in the weeds during the event on this one, but I really appreciate the thinking out-loud! I'll get better at these, thanks for the awesome vid!

[@hjorturpalmipalsson4521]

Always fun to see different take on those challenges. I used the -o flag in curl, it allows us to output the content of the curl into a file. With that in mind, I just curled a webshell file and outputted it into the static js folder and then executed it via the browser.

[@nikkittb]

I really like how you took the time to explain all the steps you took here John! Even explaining the little things, like what ngrok does and how you spin it up! Loving the content man!

[@nouriyacine8823]

I loved CTF games because of you dear . Can't stop learning more abd more all thee day. Thanks so much for everything you share with us.

[@THRE3KINGZStudios3kz]

Ayo I seen you on a recommended vid by Joshua Fluke discussing Cyber Sec and I started off just like you mane I was into making video games and I started in unity and UE5, got my degree in CIS, and lately I’ve been sharpening my technical skills. I want to get the Cyber MOS in the Army and AF and since I recently graduated, like this week, I been putting together my resume and trying to soak in as much info as possible bc We really want this job you know! Well anyways it’s nice to find someone with some things in common and your vids are very informative!

[@kylejessup5740]

Happy to see some Cyber Apocalypse videos, I'm a beginner at this stuff and only found a few flags in this CTF. I will definitely watch more.

[@eklypzn]

Solid video. I was like yelling at the screen early about the methods. I definitely had a few questions about source code answered for me and I'll probably end up referring to this video again.

[@yoshi5113]

I love how the way you explain the tricks, thanks a lot John, Love from Indonesia.

[@saidjuma1433]

I always learn something new when i see a upload from you. Keep up the good work my mans

[@jimpowers4463]

Great video, so awesome that HTB spun up the game for you to make these videos for us.

[@nicolaspanu7448]

Thank you, excellent explanation!

[@devil874]

oh thats nice i used: -o argument to uplaod a .php file that printed the flag its great i kinda allways learn something watching you

[@xBrownnyx]

It is worthwhile, thanks. Great video!

[@ilyesdhiaeddine6610]

yes please keep this format

[@akay9030]

Always wait for your videos...awesome work ..keep it up,plz upload ctf more often

[@shauncollins1280]

Love you man... Thank you so much 🙏

[@jeffersonding5898]

A great resource to use instead of reading through thousands of lines of manuals is GTFOBins. Has may important exploits and examples implemented already

[@nothingreallymatters7530]

it's super worth it just beginner like me.

[@petehinch3871]

Love your Videos John

[@bhagyalakshmi1053]

Work full this one to track is a nice easy to work my headel jobs

[@_d47_]

Thanks bro, i really like watch your videos

[@asmedeus448]

I learn something today. Thank you.

[@mrbeancanman]

its definitely worth while! more of this please :D

[@mossdem]

We know you wanna just release it now John…

[@andydietz7434]

Love the explanation and please don't think you are being "Long Winded". I agree with the others, that this is great explanations for beginners or just to understand what you are thinking!! Please keep it up and yes, we want more CTF writeup videos. Also what is the song that is in the end of the video, it is stuck in my head and I want to go find it so I can listen to it while work on my hacker skilz!!

[@THRE3KINGZStudios3kz]

My twin and I are both in the military but not branched or have MOS yet and we were told we shouldn’t get our certs before going in just wait... I kinda wished I already gotten them trying to get at least our Sec+ first 😂😂😂

[@ajaymandal2560]

Worth while ❤️👌

[@GodModeMaker]

I love Verbosity. Don't stop being Verbose. Ever. sudo johnhammond -vvvv

[@wilcosec]

This was a fun one! Thanks John!

[@adnentrimech7958]

THANKS

[@holigan5392]

Make a tutorial for black box pen testing

[@TheDyscontinuum]

Much appreciated good sir

[@telnobynoyator_6183]

I immediately though of (and saw) the FILE protocol I wonder if that's going to be the answer

[@savoyblue777]

If you don't mind John What terminal do use on your system? And thank you for all you do to help us all

[@BRYDN_NATHAN]

Thank you. KZbin

[@morsi7842]

Big fan from Egypt, I really appreciate your work. Thank you for sharing such knowledge

[@LinuxSploitOfficial]

Amazing Thumbnail ♥️

[@amine250]

That was a nice challenge

[@JoPraveen]

👏✨

[@CyberSecForce]

Great

[@dobermanelliot8129]

keep great job John, dont stop beeing verbose, we love it! if u just come and write "okay its ease lets file:///flag" we would not watch it! cya ;)

[@talinross]

Best video ever !

[@theITGuy-no3nt]

I think most of us watch for the verbosity, John.

[@bhagyalakshmi1053]

Nice 👍

[@alexandrohdez3982]

👏👏👏👏👏

[@vellankiindeevar5530]

Man your vids are so engaging

[@logiciananimal]

I think it is interesting to name a CTF game an "apocalypse", as that literally means something like an unveiling or uncovering.

[@dedkeny]

Almighty Algo STUFF!!!!!!!!!

[@krishanuchhabra]

Long form and verbose is the way to do this.

[@ayush_panwar1]

Another awesome video 👏👏 But we r hungry we need more ctfs and there are new KOTH machines out there we want a new KOTH VIDEO ALSO!!! WANT TO SEE PEOPLE Lynched by you 😆😅

[@tanrrivtko1249]

My head hurts.

[@jaopredoramires]

is this your `classic` ubuntu box? always wanted to know which version it is also, took me ages to figure out you were on XFCE

[@avasonds]

yo John your a beast I've been watching your videos, so when is the nsa hiring you?

[@joehollon317]

Great vid

[@killerskincanoe]

Will there be a secret plz subscribe command? It's the main reason why I watch.

[@danielma2824]

hello i have a problem in hack the box (challenge/ hardware) can you help me ??the file open .sal (the challengs Debugging Interface) can you me a tip

[@Ca1vema]

Can you actually put a video description in a description box? Not only ads? It’s there for a reason.

[@FaZeInvite17]

just for the yt algo :))

[@DHIRAL2908]

Haha just when I saw the curl prompt, the first thing I would try will be file:///

[@bbott-britishbroadcastingo535]

I really think he should‘ve done „curl file:///flag“

[@_JohnHammond]

I showcase that at the end of the video and explain that that is the best solution?

[@Minecodes]

Well, this is a nice challange, bu i missed it too XDD

[@cocosloan3748]

You are fucking amazing John !

[@learn_offsec]

Can you please do videos for Cyber Security Germany challenge

[@annankazi6628]

HEY SIR HOPE YOU'LL REPLY SIR HOW CAN I KNOW THAT SOMEONE HAS HACKED MY ANDROID?? PLZ REPLY ME SIR!!

[@karthika3357]

What song play in outro?

[@rebootlinux608]

I have a question do you use ubuntu on your hardware or as a virtual machine?

[@tylersmith8245]

I love the deep dives. I'm a web application developer and have been watching your channel to get a better grasp on security, and by the end of each video my face is basically surprised_pikachu.gif

[@viv_2489]

Waiting for this

[@kraemrz]

For yt algorithm

[@sumedh1678]

Doggo CTF Walkthrough, Please?

[@b0b2600]

Verbose is good. - v

[@joelpainchaud4887]

Algorithm token

[@laurenzkaml3864]

I had a better solution. You can write a trace file of the request and then just access it like /trace.

[@gauravbisht9622]

ethical hacker ed sheeran lite 😂😂

[@alpacasecurity9915]

LOL I uploaded a webshell and then found the flag

[@tamilxctf4075]

Human doing ctf 🤔..

[@rajeshvayalar965]

മലയാളി ഇല്ല

[@debtlesspig7685]

78mins tick tok

[@prabingurung4844]

hey John, what's going on (￣_,￣ )

[@himanishmandal9556]

Sir, we do know you want to start right away. Why wait after all the channel does belong to you, does it not? Kindest of Regards, Himanish Mandal one of your fans. P. S - Don't find mistakes in my statement I am from India.

[@worldaroundyou593]

💻💣🛸

[@methuso]

yes. long and verbose... please :)