-
Hacking The Skynet Mainframe and Preventing Judgement Day | TryHackMe (100 Subscriber Special)
We took technology for granted. Laughed at the suffering of the robots we had enslaved. Dismissed the warnings of the mainstream media. If was over before it began. Skynet, an interconnected neural defense network became self-aware. We didn’t stand a chance. <br /> <br /> I was sent back from the future by the leader of the resistance John Connor, my mission is to hack into the Skynet mainframe and destroy it before it becomes self-aware. I have infiltrated a Skynet data center and jacked into their network. If you’re listening to this, you are the resistance.<br /> <br /> 0:00 Super Long Intro<br /> 01:28 Enumeration With Nmap<br /> 03:33 Exploring The Web Server<br /> 05:00 Exploring Samba<br /> 08:40 Brute Forcing Squirrelmail With Burp Suite<br /> 11:15 Reading Miles Dyson's Emails<br /> 13:36 Accessing Miles Dyson's Samba Share<br /> 15:30 Exploring The Secret Content Management System<br /> 16:25 Cuppa CMS<br /> 17:17 Using Searchsploit To Find Cuppa CMS Vulnerabilities<br /> 19:00 Exploiting Cuppa CMS Local/Remote File Inclusion Vulnerability<br /> 20:00 Catching A Reverse Shell<br /> 23:35 System Enumeration<br /> 27:00 Exploiting TAR for Privilege Escalation<br /> 34:00 Outtro -
Exploiting Buffer Overflows on TryHackMe
Hello world, and welcome to HaXeZ. Today I want to talk about Buffer Overflows. I’ve struggled with Buffer Overflows for a long time. I understood the concept but always had trouble applying it practically. Recently I have buried my head in the sand and have just sunk hours into TryHackMe. I came across the buffer overflow learning path and finally understand so now I'm bringing you this video.<br /> <br /> This video by Tib3rius helped me a lot https://www.youtube.com/watch?v=1X2JGF_9JGM&ab_channel=Tib3rius <br /> <br /> I'm basically repeating his content but going through this stuff and doing writeups and videos helps me remember. <br /> <br /> Music is Bensounds.com<br /> <br /> 0:00 Introduction<br /> 02:55 Immunity Debugger<br /> 04:11 Fuzzing The Program<br /> 06:00 Creating Pattern Using Metasploit<br /> 06:30 Creating Exploit Script<br /> 07:48 Running Exploit Script<br /> 08:40 Finding MSP Distance / EIP Offset With Mona<br /> 10:30 Overwriting EIP Register<br /> 12:15 Creating Byte Arrays<br /> 14:20 Identifying and Eliminating Bad Characters<br /> 26:30 Finding Jump Point<br /> 28:13 Creating The Payload<br /> 29:30 Configuring Exploit Script<br /> 32:00 Running The Exploit<br /> 37:28 Wrapping Up -
Hack Like A Jedi | Kenobi | TryHackMe
Hello World and welcome to HaXeZ, in this video we’re going to be channeling our inner Jedi and taking on the TryHackMe Kenobi room. This room requires you to perform some enumeration to identify services. Then you need to enumerate SAMBA, NFS, and FTP. You then need to exploit a vulnerability in FTP to steal Kenobi’s private key to SSH to the server. Once you pinch the key via NFS, you can log in as Kenobi and escalate your privileges to root via a SUID file.<br /> <br /> 00:00 Introduction<br /> 00:55 Starting The Machine<br /> 02:10 Nmap Enumeration<br /> 04:30 SAMBA Enumeration<br /> 10:00 FTP Enumeration<br /> 11:00 NFS Enumeration<br /> 14:40 Finding FTP Exploits With Searchsploit<br /> 16:00 Stealing Kenobi's Private Key<br /> 19:00 Mounting NFS Export<br /> 22:00 SSH To Foothold<br /> 23:00 SUID Bits<br /> 26:00 Privilege Escalation<br /> 32:00 Wrapping Up<br /> <br /> Kenobi<br /> Hacking<br /> Hacker<br /> TryHackMe<br /> SUID<br /> Sticky Bit<br /> SSH<br /> SAMBA<br /> NFS<br /> FTP<br /> Network File System -
I'M PICKLE RICK! wubba lubba dub dub | TryHackMe
Hello World and welcome to HaXeZ, in this video I’m going to be doing the Pickle Rick room on TryHackMe. This is a fun easy room that requires some basic enumeration and then web application exploitation via code execution.<br /> <br /> Music - Rick and Morty Theme and Bensounds.com<br /> <br /> 00:00 Introduction<br /> 01:25 Nmap Scan<br /> 02:15 Exploring The Web Server<br /> 02:55 Finding The Username<br /> 03:35 Password in robots.txt<br /> 04:10 Directory Listing<br /> 05:20 Directory Enumeration with dirb<br /> 06:20 Logging in<br /> 08:00 Command Execution<br /> 08:35 I'm Mr Meeseeks Look At Me<br /> 09:00 Payload All The Things<br /> 10:00 Reverse Shell<br /> 10:25 System Enumeration<br /> 12:50 Privilege Escalation
Free Pwn Videos & Hax Movies