TryHackMe! Looking Glass... with PWNCAT

[@raskr8137]

Liked this box, it has more puzzle-solving rather than actually hunting for vulnarabilities, which is quite a breath of fresh air.

[@nareshg7292]

you have no idea how much i'm learning here . Please never stop doing this.

[@marmont8005]

Big Brother John

[@karimmohamed3744]

Really enjoyed the dive into the unknown territory at the end. Thank you for all your amazing work John.

[@Alex-ht1oq]

That last segment you did is what changes the game for me, and all other aspiring hackers out there :) really appreciate it John !

[@mina_ashraf]

You are a true king John. Thank you for your efforts to teach us. Hope you get to 1 millions subs soon

[@jd-raymaker]

Love the deep dive! very educational

[@ElliyahuRosha]

That thing with Alice private key- that's why I ALWAYS run "ls -laR /home"

[@puppe1977]

But without read permission it wouldn't show any files in alice home directory.

[@infohacking]

Simple and easy to understand every step well explained thnx for your efforts 😀😀

[@chaosfiredragon7783]

Awesome walkthrough, all those open ports were messing with me when I first started the room

[@trottingfoxinc]

John not recognizing the Jabberwock poem even AFTER decrypting it was both painful and hysterical. That's probably what I get watching these videos with an arts degree....

[@Marineio]

Or the reference "looking glass", and tweedledum, alice, it all makes reference to Lewis Carroll's work!

[@svampebob007]

Seriously I've been binge watching your videos all day. spamming connections is what lead to the 10600 ban list on my server, I had initially set it to 3 tries max, until I lowered it down to 1 try. the total was around 5000 different IP being blocked (mostly from China/Russia). What really stopped this useless waste of bandwidth was just changing the port for a couple of minutes :) Anyway in my eyes the amount of reasonable attempt you really need to connect to a server is around 1, 2 at most (for critical servers like the one that holds all the pw). That's also how I got banned from my registar :) I fired up a script that would connect back to the tiny VPS I had set up and forgot a character, and sure enough after 4 tries I got kicked off. I really like all the videos I've watched so far, because they really go into details and highlight some of the things that can go wrong in security, but also, most of the issues arise from either easy passwords, or storing the password in plain text on the server, the real juicy parts are random exploitation of an underlying program. So fare I think I'm still secured with my boxes :)

[@ricardoruiz3986]

I love these videos. Every time I watch one of your videos I wonder if you know about clipboard managers lol Clipboard history is SO good.

[@sentinalprime8838]

amazing video again had an amazing learning experience you rock man

[@DarkaFire]

Great video John, thanks - learnt a lot!

[@netharuM]

really liked this room and your pwncat thanks for this ❤❤

[@BalajiRavichandiran]

Nice informative video. Kudos to box Creator.

[@nologic18]

Scrolling through the Linpeas output isn't so bad (except the 3k ports on this one lol), you stop and explain things when you see them. Gives me idea of what I can look for in the future and what it might mean.

[@Master_Duplex]

tryhackme videos from you always teached me new things. thanks john

[@XtecherPY]

There was more puzzle than hacking for the first 21 mins 😆

[@48pluto]

I know some script languages and shell commands but never touched Python. Your'e video are so inspiring that i will start to learn some Python language. Wrote already 4 simple scripts to learn a bit about the syntax just for fun. Thanks for the video!

[@richardjones9598]

Thanks boss! Great content ;)

[@OSGoat]

Nice Job. Good to see those.

[@stefanodevenuto1867]

What a beautiful video ❤️

[@DrRobbo-ig9kn]

Aaarggh, How can you have never heard of the Jabberwocky. But apart from that - awseome as usual.

[@TimArnoldIsMe]

That poem is so etched into my soul that I knew what it was by the char counts of the first line ;)

[@samcameron6734]

I live for that hair

[@mehdiboujid8761]

on fire these last 4 days

[@user-rc3tm4of7c]

Just like california

[@mehdiboujid8761]

@@user-rc3tm4of7c HAHAHAHHHAHA

[@blackjack4494]

You could use tac command. It's the reverse of cat. No need to explicitly pipe rev

[@LikeThizzz]

6:30 yea... we both asking the same questions.

[@khaloodkj886]

11 hours, cant wait!

[@kraemrz]

love when u ranting!

[@ghadeeralhayek4373]

great man .. jest great

[@GameLord2021]

very nice video thanks for share :)

[@mirzu42]

How do you do that prompt --fancy thing in pwncat

[@fordorth]

@JohnHammond I really like the pwncat deep dive it was nice to see you not just you complete a challange but modify a tool when it did not meet your needs that is what I feel like hacking is at the core! No?

[@shreenidhibodas9816]

Do you run linux in wsl or do you have it installed as your main OS?

[@CybrJames]

Very excited. I will be in class while watching your video tomorrow lol. I am so far behind on your videos. SUCKS

[@ARZ10198]

Im also too far behind him , i just started to solve boxes but due to university assignments and all that shit i wasn't able to stay focused

[@kenLovesToCode]

You're soooo awesome!

[@Dratted9]

heard the intro before i looked at the screen... could've sworn this was seth rogans voice.

[@jantvrdy2461]

6:30 - that's what I thought to myself after trying to run linPeas on a windows machine

[@paulsesh]

6:30 Maybe I'm too high?

[@cdbcbd4930]

12:21 nmap has script for leet speak. is the direction i would have went. maybe the gobbledygook is base64 or something.

[@harleymandk]

Great video... I have to try pwncat ;-) - Some ideas for pwncat : In the old days we run Satan on Unix systems (Worked with SCO,Ultrix and HPUX) Today we run "Lynis" on our Linux systems and pipe to to a mail. It gives alot for fail config info and missing updates. Also look for an old nmap or proftpd server....etc (just ask the package system for versions and find the exploit !)

[@paulcrinq]

What’s the config of the pwncat you’re using ?

[@Insomnia_2311]

good Tutorial:)

[@maiky5565]

why not to use binary search in connecting script?

[@praveshgaire3437]

I am at reboot, I want to solve it myself before watching this video but no cluess, can't wait

[@kirandawadi4202]

Haitt..Hacker

[@praveshgaire3437]

@@kirandawadi4202 ko ho yo pheri

[@mble]

9:00 you could do this with binary search algorithm

[@nareshg7292]

that's what he did , he even said logn

[@niekgevers981]

can someones help me. i downloaded pwncat and everything works fine except the privesc command i re downloaded it and it still does't work. is this something i have to add myself or how do i do this?

[@batchhd7510]

Cant you just get around the changing password by injecting your ssh key into the .ssh/authorized_keys before rebooting? (30:45)

[@nithechosenoneppon]

It's not writable by other users. That wouldn't work. The perms for authorized_keys are "-rw-r--r--" (644) which only allows the owner to write to the file (which is alice). The group and others are only able to read it.

[@mehdiboujid8761]

Are u using ubuntu 16.04 or 20.04 with unity desktop?

[@okfine7550]

This is interesting ....

[@cacurazi]

I see there's a lot of deciphering going on here... Any good recommendations for cryptographic courses?

[@jezielsuzana8643]

you're the best

[@Corybcrook]

Are you just slaying the content or what, I see you out there trying the hacks like every day now. GG, John your one of my favorite content creates out there I learn how to be more productive && tactful after MAKE INSTALL your content to the /brain.

[@pubgmomenthack12]

Nice bro ket it up

[@ankitkumarjat9886]

You should make long videos It's great

[@JohnDoe-by1xg]

U d best john❤❤ I lost the connection twice to the machine by 1.rebooting with a typo in my reverse shell command 2. Hitting ctrl c on nc shell ( forgot to stabalize)🥺🥺😭 #poorme

[@ARZ10198]

Finally with pwncat xD

[@FantasM]

59 minute video wooooo XD

[@karimwassef9892]

I've been trying to use pwncat for shells but i doesn't work like it does in this clip, it just gives me a shell that is less stable than netcat. I have it downloaded and also the environment but it doesn't seem to run like this clip

[@_JohnHammond]

Can you give me a bit more detail? What is doing that is different than the video? Are there any errors messages, or strange output? How exactly is it less stable that netcat and what target are you using it against?

[@karimwassef9892]

@@_JohnHammond I removed it and reinstalled it according to the README on the github and now whenever I run it i get a module not found error

[@karimwassef9892]

and I am most likely doing something wrong because I just started learning this stuff.

[@israelgonzalez546]

What Linux Os is he using?

[@peterarbeitsloser7819]

Ubuntu, but just don't...

[@jorisschepers85]

Best vid so far. Thanks

[@stanislavsmetanin1307]

"I hope you enjoy this"? Really?? 🙂 I was - freaking - applauded standing 🧍‍♀️ 👏👏👏👏👏👏👏👏👏 Thanks, John! 🤝

[@Joshua1_7sc]

They don't teach The Jabberwocky at USCGA?

[@anish_chapagai]

I would've watched whole stream of you going through this the first time. My opinion is that you create a different channel for streaming these rooms and later use clips from them to create video for this channel.

[@mcncyo]

Would love it also

[@TehPwnerer]

automate the process with a bsearch

[@MrAvalanches]

Does anyone else watch him because he sounds like Seth Rogen... no? Just me? Alright..

[@6r0b]

The discord link says it is invalid

[@6r0b]

Works now ^^P

[@neils_xd4100]

u could have done a binary search to find that mid port way faster editing: ohh you have done that

[@ino145]

9224 though, hope you fixed it, although it's not a huge error xD

[@mastex5575]

youtube allgorithm thing! ;-)

[@kenLovesToCode]

rabbit hole

[@williamn543]

vin-ie-ehre

[@dranhkwar]

Nice ❤️❤️🌹

[@zoes17]

Why `cat | rev` instead of `tac `?

[@Cycl_ps]

It looks Like tac will reverse line order, but not character order. You could read with 'tac ' and get the same output but it would still need to be piped to 'rev'

[@dannyv12]

Am I the only one that created a python script for the ssh port game ? 😅 Btw thanks to this box I now always do cat /home/*/.ssh/id_rda on each box 😀

[@yesstude]

StrictKeyHeck...

[@hamu.u]

Can someone help me out am trying to do hackthebox machines and tryhackme using wls2 but am having difficulty when doing web related tasks i can seem to get the ip of machine to work on my Windows host browser

[@naomimendoza7164]

Hey, thanks to the recommendation to me of @ magical hack on Instagram, I unlocked my iCloud in 30 minutes.

[@Cycl_ps]

You will need to connect your machine to THM's network to use the local IP address provided to you. On the Sidebar go to Access Machines >> Open VPN and follow the instructions there to set up an Open VPN connection. Once done you will be able to connect to any active room on the network.

[@davidpanic]

I thought this was gonna involve KVM looking-glass :/ dissapointed to say the least.

[@notyoursanymore9027]

Port 9224

[@pubgmomenthack12]

Kep*

[@LinuxJedi]

try monitoring ssh conversations first

[@Luftbubblan]

:D

[@noemacias4227]

find . -not -user alice -ls

[@Cooliofamily]

Lewis Carroll. Pretty interesting stuff, clearly the nonsense poem. Cmon Hammond go take an English course!

[@remychaverot2981]

for i in $(seq 9000 100 13000); do ssh -o StrictHostKeyChecking=no -p $i IP ; done ; echo "John Hammond do the best content of security" :)

[@ZakMaxinIT]

This was a fun room! Not sure if anyone else had this issue but i was getting the "No matching host key type found. Their offer: ssh-rsa" error message when attempting to SSH to the ports. To get around this I had to add the '-o' switch with 'HostkeyAlogrithms=+ssh-rsa' as the argument so, my working ssh command was: ssh -p 9001 -o HostKeyAlogrithms=+ssh-rsa [e-mail] hopefully this helps anyone!