Tier 2: Base - HackTheBox Starting Point - Full Walkthrough
Learn the basics of Penetration Testing: Video walkthrough for the "Base" machine from tier two of the @HackTheBox "Starting Point" track; "don't forget to contemplate". We'll be exploring the basics of enumeration, service discovery, directory busting, swap files, PHP type juggling, insecure file upload, privilege escalation with GTFOBins (find) and more! Write-ups/tutorials aimed at beginners - Hope you enjoy 🙂 #HackTheBox #HTB #CTF #Pentesting #OffSec
↢Social Media↣
Twitter: https://twitter.com/_CryptoCat
GitHub: https://github.com/Crypto-Cat
HackTheBox: https://app.hackthebox.eu/profile/11897
LinkedIn: https://www.linkedin.com/in/cryptocat
Reddit: https://www.reddit.com/user/_CryptoCat23
YouTube: https://www.youtube.com/CryptoCat23
Twitch: https://www.twitch.tv/cryptocat23
↢HackTheBox↣
https://app.hackthebox.com/starting-point
https://twitter.com/hackthebox_eu
https://discord.gg/hackthebox
↢Video-Specific Resources↣
https://medium.com/swlh/php-type-juggling-vulnerabilities-3e28c4ed5c09
https://portswigger.net/web-security/file-upload
https://gtfobins.github.io/gtfobins/find
↢Resources↣
Ghidra: https://ghidra-sre.org/CheatSheet.html
Volatility: https://github.com/volatilityfoundation/volatility/wiki/Linux
PwnTools: https://github.com/Gallopsled/pwntools-tutorial
CyberChef: https://gchq.github.io/CyberChef
DCode: https://www.dcode.fr/en
HackTricks: https://book.hacktricks.xyz/pentesting-methodology
CTF Tools: https://github.com/apsdehal/awesome-ctf
Forensics: https://cugu.github.io/awesome-forensics
Decompile Code: https://www.decompiler.com
Run Code: https://tio.run
↢Chapters↣
Start: 0:00
Enumerate ports/services (NMap): 0:13
Add to hosts + export $box: 1:19
Explore website: 3:06
Login (ffuf? SQLMap?): 3:50
Swap file: 6:31
PHP Type Juggling: 8:55
Insecure File Upload: 11:23
Gobuster: 13:53
Reverse Shell (navi - crunch): 15:42
Post-enumeration: 17:30
Privilege Escalation - GTFOBins (find): 19:35
End: 21:41
-
1:29:18
John Burk
3 hours agoJack Black to the rescue!
23.4K23 -
1:01:15
Russell Brand
7 hours agoKansas just SUED Pfizer over COVID Vaccine Safety Claims. What’s next!? - Stay Free 389
103K204 -
1:33:14
Jim Breuer
2 days agoSERPENTS OF HUMANITY | EPISODE 140 THE BREUNIVERSE
32.8K32 -
0:30
Power Slap
5 hours agoIntroducing Dumpling - Russian Farmer Turned Pro Slapper | Power Slap 8
25.4K6 -
1:36:02
Mostly Sports With Mark Titus and Brandon Walker
19 hours agoMostly Sports With Mark Titus and Brandon Walker Presented by Jägermeister | EP 192 | 6.19.24
31.8K10 -
2:39:18
The Charlie Kirk Show
4 hours agoLow-Propensity Summer + The Plan to Free Bannon + NBA to the Senate | Ruddy, Rep. Burlison, White
88.2K74 -
59:12
The Dan Bongino Show
6 hours agoIs This Who They’re Lining Up To Replace Biden? (Ep. 2774) - 06/19/2024
487K1.53K -
35:00
Steven Crowder
7 hours agoEXCLUSIVE: Murderer Groomed High School Girl into Sex in Jail; Massive Cover-Up
270K445 -
2:00:15
LFA TV
9 hours agoNEW ILLEGAL POLICE FORCE! | LIVE FROM AMERICA 6.19.24 11am EST
53.6K37 -
2:02:24
Midnight's Edge
6 hours agoThe Acolyte does pronouns, but YouTubers to blame for Star Wars collapse? | MEiTM #576
29.3K2