@Jonobi_Musashi
Completed this box today with help from the video. For some reason, the PHP web shell worked initially, got deleted by the script, and then stopped working entirely when trying to reupload (very odd). Used the php-reverse-shell script in the end and it worked consistently. Haven't owned a box for a year it shows. Fumbled over everything from upgrading the shell to dropping an SSH key into dash's authorized keys. It's crazy how quickly skills/knowledge can fade when not using them frequently. Thanks for the video, it helped loads.
@Horstlicious
I really, really love that you don't edit out your mistakes! I sometimes feel so unbelievable stupid when such things happen to me, but it really helps me to see that even people with much more skill still sometimes mess up! I messed things up on this box (but at least i learned :D): I did not properly use sqlmap, so the whole token/cookie thing did not work, therefore I have written my own python blind sql injection script from scratch. While at it, I learned about python thread polls to pwn in parallel \o/ After extracting the admin hash, john failed to crack it and very much later I learned about mysql equals (or like) not beeing case sensitive and my script therefore extracting the hash with mixed case... So much pain, but a lot to learn even just extracting and cracking the password! Thanks hackthebox for providing those machines!
@AUBCodeII
Ipp is a certified hood classic
@cybSe-u7n
it wasn't due to cookie timeout, as you saved the request data at wrong file "root.out" at 10:58 , and the sqlmap ran correctly after deleting the previous result data. (i unknowingly spoke loudly when you saved it at wrong file š©)
@nikolanojic6861
Awesome ase per usual thanks for the vids !
@vjohnkunju
Awesome š
@wire_surfer
10:48 RIP cookie :(
@StevenHokins
Nice one
@0xYouTube
ā¹ļøslove hard and insane machine with guided mode
@shazinct2200
Can you do a video about that hashcat box How i cam build my own???
@SyBlast
Why is TTL important when running an nmap? Like Iām guessing you do it because you ran into an issue in the past that couldāve been avoided if you used the double verbose command. Just curious. Hoping you see this lol
@tg7943
Push!
@AUBCodeII
Ipp doesn't like me anymore :(
@bhag47
Does anyone got this error from sql map after saving request into a file and use that is "unable to find http header" anyone?
@colloqy
always good to watch these videos because i did end up rooting it but i did get stuck on the raw symlink not working (however creating a symlink to just, all of /root works) and now i know why ^_^
@mohammadhosein77
as always awesome !:hand-pink-waving:
@sado_21a
:D
@Hexaphp
The easiest ctf in my whole life i saw it
@Waylen__Media
26seconds
@AsadAli-ye8ns