THM File Inclusion

[@stuffy24]

Get 20% OFF @manscaped + Free Shipping with promo code STUFFY24 at MANSCAPED.com! #ad #manscapedpod

[@alechernandez5506]

Tricky Tricky, I always feel like I don't understand anything but I started my PJPT coursework and it turns out THM has been great at exposing things to me and I capable of more than I realized.. It gets easier with repetition. Thank You for all that you do to explain things in your own words. For anyone reading this, make sure to take good notes!

[@PublishX]

this was a really difficult section and i put it off for a day. i woke up with a fresh mind and watched this and stopped at 9:45. took my time to read it and truly understand it and do the labs and had a lot of fun knowing i was able to completely grasp it. it all finally clicked and made complete sense. i really appreciate the tutorial, finished all my answers right now and watching this video to squeeze anything else i can learn

[@stuffy24]

That's awesome! Congrats! That's a big thing thats so hard to do!

[@Jugg215]

Yo youre a lifesaver on this one. I literally would have had no clue how to get through this. Definitely the hardest room so far.

[@stuffy24]

Glad you figured it out! The big thing is just to make sure you understand it! That's awesome to see people getting through these harder rooms!

[@johnnyclejel7434]

Great Video! I would've liked a more in-depth into the 'why' behind the actions that were performed. Ex: Why are you changing the referer? I also don't mind a longer video if it's explaining all the technicality of what is going on. Awesome stuff though and keep it up!

[@MeeroSom]

Thank you so much, this is one of the best walkthroughs, quite similar to the legends of similar content! You definitely are talented to have fun and contribute at the same time. please go on, learn, do stuff, I give a follow.

[@stuffy24]

Thank you so much! I'm glad you like it and hopefully we all keep learning! We are just getting started !

[@frkangungor]

Keep going, you are doing it great

[@stuffy24]

Thanks man! Really appreciate it!

[@sugarskulllyfe5890]

i really appreciate your walkthroughs!

[@stuffy24]

Thanks man I really appreciate that! I just want to get more people into cyber ! It can be so fun! Most people think it's impossible to be a hacker but today it's so much more accessible!

[@radovanthestudent4268]

Cheers, I've been struggling a bit .. took me some time to google out the "file is actually body parameter. Can't recall, if we have covered this one in previous lessons (also checked HTML module on THM). The questions is; why do we have to use body parameter for "file" instead of query parameter. Cheers!

[@stuffy24]

Can you throw the question in the discord so I can remember to answer this when I get a chance ? Thanks man

[@funandweird5633]

Thanks a lot mate!! I've been finding that the explanations on the thm to be difficult to understand. Sometimes it makes me want to give up. I think thm should have video walk throughs and tutorials in video format which beginners can easily understand. You make things so much clearer to understand. Please keep posting videos for thm, we NEED them. Any tips for resources that beginners could utilise?

[@stuffy24]

It all depends what your trying to learn but I find that if your studying for certs then use the resources the cert recemmonds I know it sounds dumb but a lot of people look for pump and dump info and don't retain any! If your looking for hacking stuff and you learn best in video I recemmond network chuck, cyber mentor, professor messer, and Hammond. They have all great KZbin channels!

[@jeremiahmbugua3312]

Thank you for this, I really appreciate the video. Am running into problems though, my rce doesn't work, might you know what the problem is? I have replicated exactly what you did but somehow it's not working.

[@stuffy24]

You can join the discord or Patreon and use the chat there but I couldn't tell you the issue without getting more information. The discord and Patreon have chat features you can use to upload screenshots and things

[@jeremiahmbugua3312]

@@stuffy24 I finally figured it out: I was using the wrong ip. I was using eth0 instead of tun0 for my vm🤦🏾. I wouldn't have made through the challenges without your walk-through. I will definitely join your discord.

[@stuffy24]

@@jeremiahmbugua3312 glad u figured it out man! Wish I could a helped over comments just so hard without more context.

[@jeremiahmbugua3312]

@@stuffy24 your video helped me alot. I was only able to complete the challenges because of your video bro. I really appreciate your effort. I was completely stuck. I was only to do the first challenge by myself, the rest I was clueless. I have one question but I will ask it on your discord.

[@awecwec3720]

can't thank u enough

[@stuffy24]

Thank you

[@cameronjenkins584]

Yoo you mentioned discord... where is the link for this? :)

[@stuffy24]

discord.gg/KzzGfnKjCS

[@greyhat430]

why thm doesnt have rooms for cURL , altest they need to warn us to learn cURL ,

[@stuffy24]

I think it's an expected thing to know since LFI isn't a beginner technique

[@greyhat430]

@@stuffy24 your content is amazing , helping many who stuck in these rooms , love you soo much sir : ) and pls suggest resources on how to learn curl , it became my nightmare , i cant understand headers also and modifying them

[@stuffy24]

@@greyhat430 feel free to hop into the discord and ask in the questions section and if I can't get to you someone for sure will! Thanks man!

[@Epeymen]

merhaba vpn bağlanıyorum ama ip adresi değişmediği için 405 hatası alıyorum yardım edermisin

[@moosematrix]

Subscribed buddy.!

[@stuffy24]

Let's go!

[@unnamed3533]

The last one, challange I got reverse shell, and typed hostname by myself right to the terminal)

[@unnamed3533]

I've been trying to get my privilege escalated, but they have closed every single possibility :(

[@stuffy24]

@@unnamed3533 hop in the discord and let us know the issue ur having we can try and troubleshoot

[@unnamed3533]

@@stuffy24 nuh, it is not a trouble, I just tried to root the machine that I was not supposed to root.

[@stuffy24]

@@unnamed3533 ohh gotcha I thought you were saying it wasn't giving you a shell I apologize! Lol

[@ragtaghero84]

awesome

[@stuffy24]

Thanks so much!

[@unclehoop3554]

Why is my result from cyberchef is not the same as yours? My recipe is url encode. My input is ../../../../etc/flag1. My result doesn't contain ".." as yours. Also my result seems to be longer than yours. Here is my encoded result: file%3D%2E%2E%2F%2E%2E%2F%2E%2E%2F%2E%2E%2Fetc%2Fflag1 Any suggestions? Thank yo

[@stuffy24]

Could you throw the screenshots into the discord ?

[@unclehoop3554]

@@stuffy24 just posted it. Thanks