SQLite Blind SQL Injection - HackTheBox Cyber Apocalypse CTF

Moving your first steps into hacking? Start from HTB Academy: bit.ly/3vuWp08
Hungry for more hacking training? Join Hack The Box now: bit.ly/331nQCl
For more content, subscribe on Twitch! / johnhammond010
If you would like to support me, please like, comment & subscribe, and check me out on Patreon: / johnhammond010
PayPal: paypal.me/johnhammond010
E-mail: [e-mail]
Discord: johnhammond.org/discord
Twitter: / _johnhammond
GitHub: github.com/JohnHammond

[@justincrowl1629]

Most of the time you get a video by an old pro that knows the answers, or somebody that edited it to appear better than they are. I personally learned far more watching you stumble your way to a solution and working through the logic. This is gold, and you earned yourself a subscriber! Keep 'em coming

[@ralphy3393]

Agree!!!

[@mkevilempire]

Could you point to one of those videos with some old pro who knows the answers? :)

[@justincrowl1629]

@@mkevilempire John is a pro that knows the answers. However he walks through it in more depth than hitting F12 and saying "there it is! That's the vulnerable code". And then running the script he knows will exploit it and saying "there ya go". Some people are just born teachers. Tomnomnom is another person that I feel is a natural teacher. Some people got it some people don't.

[@MyurrDurr]

Watching it gradually print out the flag was like watching a hacker scene in a movie :')

[@NeXXyD]

Awesome video as always! :D // TOOD: Replace all TODO's for TOOD

[@PhilAlbu]

TOOD! 😀

[@simplysurvival6115]

As a total noob, that was incredible to watch. Seeing you work that out logically was so helpful in showing the type of thought process it takes. Thank you

[@jhbonarius]

I was literaly shouting "END!" At the screen 😫

[@nandobordas]

Glad to know I wasn't the only one. 🤣

[@lobley2]

He got there in the…. END

[@Topherelius]

Super awesome! I really enjoy palling around with you on challenges. I'm learning a lot about the critical thinking of try, fail, try something else instead of getting bogged down in an endless loop of my own making. Thanks a bunch John!

[@RedHeadWolf117]

Thanks! I need to get into this! At the moment I'm a SOC analyst. I've ran into your articles on Huntress Security while reading about things while I'm solving/researching events! So thank you for that. :D

[@ahoustonpsych]

Hey John, I'm a relatively new viewer (started getting your videos recommended a month ago). I wanted to share my thoughts on videos like this. For reference, I'm 27 and have delved into programming mostly as a hobby. I've never done anything like the challenges* you post about, but I'm absolutely enthralled by them I'm a SUPER huge fan of the kind of live, mostly-uncut reverse engineering you've been doing in this video and others. I feel that you're genuinely adding something to the huge wealth of content that's out there. Everything from the way you conduct yourself in the video, to the way you explain little details, to the way you spend time googling something real quick to figure something out, to your personality and sense of humility, is absolutely perfect. I have almost zero actual criticisms. You're extremely personable and I find it extremely easy to relate to you as a person in a video like this (as in, your train of thought is very similar to my own, and you end up having a lot of the same questions that I have). You're very good at explaining your thought process: it's always clear where you are and what you're doing, what you're about to do (mostly), and what you've done already, and it's very easy to follow and understand you. The live element is phenomenal, and I'm genuinely looking forward to future content from you. Thank you for taking the time to make these videos! * I'm talking about any of the live stuff you do. Challenges, malware analysis, etc. They're all gold.

[@JohanSteyn777]

I really like the fact that I could follow your thought process while unpacking each section of code. The video isn't edited to show less, it just jumped twice to what was already explained and bound to happen because the statement syntax was now correct. Thanks to my friend Machiavelli for recommending this video.

[@mossdem]

Lovely timing. Needed this after a stressful day! Great video

[@jannikmeissner]

Such a great video again! Despite me wanting to scream at you sometimes, but you noticed all of it on your own.

[@neui6997]

Well that’s pretentious

[@jannikmeissner]

@@neui6997 haha, I guess it came across differently - I am learning way more than I would have known, but some things are easier to pick up as a viewer and/or with a different perspective, so obviously there are those "why don't you try X" moments - but I probably wouldn't get to those places on my own (last time I actually worked on offensive security was 13 years ago, in which there is a six year period in which I didn't write a single line of code in any language before I got back to a more technical role now)

[@almostanengineer]

I don't know about want to scream, some of us actually started shouting at the screen.

[@jacopocaira5199]

I learn a lot wtchig your videos, you're really good, i'm you're sub now, amazing work John!!

[@shuttlecrab]

This was super freaking interesting. Blind injection is quite a weird one to me and couldn't wrap my head around some of the reading I've done, this opened my eyes to the possibilities of blind injection and what can be done, thank you very much

[@59TheLouis]

The character messing up things wasn't the &,#,% or the others, it was the ' haha. You printed the message at the end of the loop so it threw the error before getting to the message (you can see the faulty char right before the exception at 27:49 when you print the char at the beginning of the loop). It does make sense too because you surround the char you're trying with single quotes. Anyway good video

[@yovelspike]

nice eye, I wouldn't have seen that without your comment. That attention to detail looks like a skill I would like =D

[@59TheLouis]

@@yovelspike haha thanks, gotta catch them bugs ;)

[@jonathanblomberg]

This is like magic, didn't understand a single thing but enjoyed every second of it.

[@yaakovkrakowich4563]

Same here, I'm loving your channel so far✌

[@AjitemSahasrabuddhe]

Wow! This is one of the most amazing videos that I've ever seen.

[@Kiiib4]

Great to watch someone being able to script this. :D I literally had to semi-brute the table and the flag using BurpSuite Intruder because I horribly suck at automating stuff like that. Took me 45 Minutes to get it done.

[@elidexterdiaz]

good master..every video we learn.. nothing script kiddies..pure knowledges..thanks a lot for teaching us.

[@rntr200]

Keep them coming these are great! Good job

[@nothingnothing1799]

For anyone wondering the song at the end is fearless by lost sky. Also great video like everyone else I was screaming END

[@jessemurdock2406]

Thank you John, very encouraging.

[@avikkarmakar7997]

John makes every hard question human-doable :-). it was really fun. I really struggled at this one

[@McTavish1234567890]

Nice video! Learned alot watching you

[@bobbyaguirrejr3491]

Idk why but this was fun to watch. A lot of aha moments for me. Thanks man

[@Westar.]

Love these code review challenges

[@julesl6910]

That was great, thank you so much!

[@lobley2]

While watching this video, with my limited knowledge of sql injection I was wondering if it would be a lot easier to just stick a semicolon into that order by input to allow you to end that sql statement and start a new one, enabling you to put in whatever you want… but I did eventually realize the code running the sql query is outputting whatever is returned by the FIRST statement, so any sql you could run after that first statement would *probably* be useless if the end goal is to leak data. (however would still be useful if your end goal was to destroy data or something like that)

[@aspiringpentester9347]

impressive loving the vidz man

[@popooj]

need look some more into blind sqli... but always a blast !

[@justkiddieng6317]

WOW that logic. also that gradually printing the flag amazed me. wow bro

[@koussayhajkacem287]

The END JOHN, the END! That's what I figured out from the challenge...

[@abhinavgamercr1419]

Hi John sir big fan new in your channel !

[@rebootlinux608]

I love your content bro.👍

[@jorgevilla6523]

Great video!!

[@krlst.5977]

Great video i had a good time. Thx

[@Timooooooooooooooo]

Love this 👍

[@Joel-gf4zl]

Definitely gives more knowledge than throwing it at sqlmap.

[@MyuzikuNouto]

That was dope!

[@SecurityTalent]

Great bro.

[@PreetisKitchenltr]

Thats cooooooool 🔥🔥

[@oschvr]

Awesome !!

[@Synapse-id6ej]

Great video, but you should apply threading for the final part, much faster work

[@UZBANONS]

Good Luck bro

[@georgehammond867]

Very nice ...Dumps-Up!

[@NoTengoIdeaGuey]

Gotta love the moment where I'm yelling "END....ENDD...END...it needs an END" at my screen. I know for a fact if someone were to record me coding there would be probably 5x as many instances of me freaking out over what went wrong when it's just some silly syntax error i forgot to copy from the documentation lmao.

[@hackingismylife2167]

Hello sir your videos rellay helpfull for beginner

[@custume]

good video

[@HitemAriania]

21:37, how long was the break? :) awesome work tho mister! really great stuff!

[@shubhamnailwal3561]

You are awesome

[@lterego]

This was a fun problem. Solved it using the BurpSuite during the challenge... then got ashamed and went back and made a nice python script. Aliencamp was another fun emoji challenge :)

[@LinuxJedi]

why does your sublime text instantly update to executable?

[@krishanuchhabra]

Awesome

[@blazi_0]

Wow bro this was cool

[@xiam.]

so cool

[@tg7943]

Push!

[@bech2342]

now it's time to learn how to make a blind injection with less requests 🙈 well done.

[@nothingnothing1799]

Considering how the flags are structured he could check vowels first then constants by their commonality in words, but other then that you risk missing a character

[@florentwinamou6650]

you're the man....

[@ayush_panwar1]

Hi , we need a live session , also love from india

[@abulaman8713]

Man watching that flag coming thru almost was like magic ❤️

[@gametech9649]

Anyone tell me wht all the programming Lang I need to know for hack the box and anyone tell where to learn hacking

[@azelbane87]

A MA ZI NG as usual 👏🤣👌🏽👍🏿👏

[@devil874]

you could have also done it with a time based subselect ;D

[@mjtonyfire]

Your brain. Your damn brain. KUDOS!!!

[@ca7986]

❤️

[@LilPozzer]

бРАВО, Маэстро!

[@johnsnow1062]

Cool

[@neiltropolis]

More Rick and Morty please! Oh wait, wrong guy

[@aryankumar3356]

Hi Sir Help Me i want to know best book to learn reverse engineering from zero to advance..... Plzz help Thanks

[@_CryptoCat]

😻

[@hrisikeshroy9976]

Where to learn ctf and htb

[@ko-Daegu]

Where’s printable car in your python script used ??? How does python knows hay I should print only these char ???

[@CrossDeMilo]

i BLAME YOU for The Sleepless Nights, lol jpjp,watching ur videos lol

[@justknot4481]

alocate object types to object class?🙂👻

[@connected0x00]

subtitle?

[@jeezboi5079]

Hilson thapa Bernhardt

[@Maybehassanawad]

I NEED MALWARE VIDEOS

[@nandobordas]

The END, John. THE END. That's it, that's the comment.

[@Heavenig]

Any biafran here?

[@haroldgreenhalgh9942]

in the real world you dont have all the code to look at

[@alientubeGalaticfederation]

guy says hes a hacker expert doesnt even know case statements, damn must be pro walk thru then do the hack.... lol

[@OMER3-1-3]

[@hahab]

Great video!!!