Vulnerability Research and Exploitation | TryHackMe Junior Penetration Tester

In this video walk-through, we covered exploiting vulnerabilities and vulnerability capstone rooms as part of TryHackMe Junior Penetration Tester pathway.
*********
Receive Cyber Security Field Notes and Special Training Videos
/ @motasemhamdan
**********
Answers to the room
motasem-notes....
TryHackMe Vulnerability Research and Exploitation
tryhackme.com/...
********
Google Profile
maps.app.goo.g...
LinkedIn
[1]: / motasem-hamdan-7673289b
[2]: / motasem-eldad-ha-bb424...
Instagram
/ motasem.hamdan.official
Twitter
/ manmotasem
Facebook
/ motasemhamdantty
******

[@danosullivan2964]

Just an FYI for people, I didn't need to setup a nc listener and could run commands from the shell offered by the python script in my terminal. Only difference was I ran it using python3, then you can ls the contents and the flag is there :)

[@Bracara]

Did exactly the same thing.

[@raiders18dr]

hell yeah

[@Blu3yyy]

Thank you Motasem, great video as always. Much appreciated!

[@ibrahimiam]

Thanks for all your contributions

[@huuloc8719]

Thank you so much Motasem.

[@Fullstackdev-]

thank you for sharing

[@Max-hi4tc]

Traceback (most recent call last): File "47138.py", line 23, in xxxx = raw_input('cmd:') NameError: name 'raw_input' is not defined what went wrong?

[@kevinweeks3824]

i removed raw_ then reran the code and it worked. xxxx = input('cmd:')

[@tomkraus1610]

Check my reply

[@otojonkhudayarov9111]

run with python2 instead of python3 => $python2 47138.py

[@jeremycheong8036]

Hi Motasem, could you help me i am stuck on using 50477.py RCE 3 instead. I have seen other youtubers and they end up with the same result. (i.e output "system") and I did not receive a shell. Seems like something is wrong with the encoding portion of the script. Script contains quote(cmd) in plain text instead of encoding. I think that's the error. I also ran a listener but no avail.

[@pratikdograma4322]

Hi Motasem thanks for your effort,Is there a way to exploit any unguarded windows 10? I couldn't do this in no way excluding msfvenom ...

[@tomkraus1610]

I keep getting an error when trying to execute the 47138.py. Traceback (most recent call last): File "PATH ON PC/47138.py", line 23, in xxxx = raw_input('cmd:') NameError: name 'raw_input' is not defined I only edited the py file, by replacing the target URL and removing the proxy. Same as you. Any help?

[@tomkraus1610]

i found the error, ended up changing "raw_input" to "input" and "urllib.quote" to "urllib.parse.quote" because python3 got shell

[@mohammedkhaledabdullahbend4514]

ليش م تنزلهن بالعربية وهل في ترجمة للفيديوهات؟؟

[@myname-mz3lo]

you made that waaaay too complicated. once you have the shell just do ls and cat the flag.txt file ... dont know why you went and did all that extra stuff

[@mohamedali8605]

Thank you so much ,Gazakom Allah 5ayeraaan

[@namelastname3492]

Are your notes available for download from somewhere?

[@MotasemHamdan]

Hello, Notes are available as part of the channel memberships. kzbin.info/door/NSdU_1ehXtGclimTVckHmQjoin

[@namelastname3492]

@@MotasemHamdan Got it. Thanks. By the way your contents are really good and understandable. I start recently dealing with Cyber Security and I'm finding your channel for a really good resource. Keep going :D

[@gihandilshara847]

First view and like

[@otojonkhudayarov9111]

sometimes i say : "what a hell is that 🥲" , exactly same code , exactly same ide , same python version.Buttttt it works in Motasem and gives error for me , lol

[@MotasemHamdan]

You must be doing something wrong :)

[@iCyberVenom]

@@MotasemHamdan Idk man...I ran EXACTLY what you ran and it doesn't work. Same python script gives all kinds of errors for "print" and "raw_input"

[@figurxfigur8935]

@@iCyberVenom probably you have to run script using python2 or change syntax to python3 in code