00:00 - Introduction talking about how this box is about finding CVE’s and building an exploit based upon exploit
00:50 - Start of nmap
03:00 - Running gobuster and showing the importance of using multiple wordlists.
05:00 - Attempting to register an account, which shows the endpoint /api/register but /api/ returns a 404
06:10 - Showing that raft-small-words wordlist won’t discover .git but will because commons has .git/HEAD
08:25 - Running Git-Dumper to extract the source then looking at the code
09:00 - Showing the vulnerable code and how secure the code appears at first glance without knowing specifics about the library
10:00 - Googling MySQLJS Sql Injection and showing how you would have found this exploit
11:30 - Showing how you could have found it blindly, passing an object into the SQL Query and doing SQL Injection on NodeJS with MySQL
19:00 - Logging in and finding OpenWebAnalytics version , finding a CVE and writeup for the vulnerability
22:30 -
11 views
197
43
6 months ago 00:33:44 1
Best Hacking Laptop 2023
6 months ago 00:27:16 1
Top Hacking Books for 2023
6 months ago 02:00:43 1
hack the box
6 months ago 00:20:43 1
Расследую инцидент взлома | #HackTheBox | КАК ПРОЙТИ #
6 months ago 00:36:09 1
Прохождение #Linux-машины , сложного уровня | #HackTheBox | КАК ПРОЙТИ #
6 months ago 00:30:39 1
Прохождение Linux-машины средней сложности SANDWORM HackTheBox | КАК ПРОЙТИ
7 months ago 00:13:24 1
Прохождение задания UNDER CONSTRUCTION на Google CTF 2023 | КАК ПРОЙТИ UNDER CONSTRUCTION GOOGLE CTF
7 months ago 11:21:04 1
Bug Bounty Course 2024 Updated
7 months ago 07:22:03 1
Ultimate Guide to Ethical Hacking with Kali Linux #ethicalhacking #hacker
7 months ago 00:41:25 4
HackTheBox - Visual
8 months ago 05:30:24 3
George Hotz | Programming | Hack The Box | ctf practice for skill (should tomcr00se return?)
9 months ago 01:02:06 14
HackTheBox Zipping
9 months ago 00:16:21 18
HackTheBox - Sau
9 months ago 02:09:39 12
HackTheBox - Coder
10 months ago 00:15:02 1
Решение машины #topology на #hackthebox
10 months ago 00:13:41 1
Решение машины #cozyhosting на #hackthebox
10 months ago 00:46:30 1
Tier 0: HackTheBox Starting Point - 5 Machines - Full Walkthrough (for beginners)