Golang For Hackers: LDAP Injector - Episode 01

IppSec · Beginner ·🛡️ AI Safety & Ethics ·1y ago
Episode 2 Dependency Injection: https://youtu.be/BhLpqRev80s 00:00 - Introduction 01:30 - Going over LDAP Injection, showing we can log in with a wild card for username and password 02:27 - Showing the request in BurpSuite, going over how we can enumerate data via Boolean Injection and wild card behavior 06:43 - Quickly going over Binary Search/Divide and Conquer, unfortunately, we cannot use it, but good to know for other Boolean Injections 08:45 - Start of creating our program, creating a TestPassword function, so we can replicate what we did in BurpSuite 16:15 - Creating a function that generates a lower alpha-numeric character set for us to use 20:40 - Starting the Bruteforce Logic, making a function that will bruteforce a single character 24:30 - Making the Bruteforce function, which will bruteforce each character of the password 26:30 - Talking about an optimization we can do and how many requests each method of bruteforce would do 29:07 - Creating the Prune Charset function, which will reduce our charset to only those that are in the password 32:13 - Going over each function, cleaning up some if/then statements
Watch on YouTube ↗ (saves to browser)
Sign in to unlock AI tutor explanation · ⚡30

Playlist

Uploads from IppSec · IppSec · 0 of 60

← Previous Next →
1 HHC2016 - Analytics
HHC2016 - Analytics
IppSec
2 HackTheBox - October
HackTheBox - October
IppSec
3 HackTheBox - Arctic
HackTheBox - Arctic
IppSec
4 HackTheBox - Brainfuck
HackTheBox - Brainfuck
IppSec
5 HackTheBox - Bank
HackTheBox - Bank
IppSec
6 HackTheBox - Joker
HackTheBox - Joker
IppSec
7 HackTheBox - Lazy
HackTheBox - Lazy
IppSec
8 Camp CTF 2015 - Bitterman
Camp CTF 2015 - Bitterman
IppSec
9 HackTheBox - Devel
HackTheBox - Devel
IppSec
10 Reversing Malicious Office Document (Macro) Emotet(?)
Reversing Malicious Office Document (Macro) Emotet(?)
IppSec
11 HackTheBox - Granny and Grandpa
HackTheBox - Granny and Grandpa
IppSec
12 HackTheBox - Pivoting Update: Granny and Grandpa
HackTheBox - Pivoting Update: Granny and Grandpa
IppSec
13 HackTheBox - Optimum
HackTheBox - Optimum
IppSec
14 HackTheBox - Charon
HackTheBox - Charon
IppSec
15 HackTheBox - Sneaky
HackTheBox - Sneaky
IppSec
16 HackTheBox - Holiday
HackTheBox - Holiday
IppSec
17 HackTheBox - Europa
HackTheBox - Europa
IppSec
18 Introduction to tmux
Introduction to tmux
IppSec
19 HackTheBox - Blocky
HackTheBox - Blocky
IppSec
20 HackTheBox - Nineveh
HackTheBox - Nineveh
IppSec
21 HackTheBox - Jail
HackTheBox - Jail
IppSec
22 HackTheBox - Blue
HackTheBox - Blue
IppSec
23 HackTheBox - Calamity
HackTheBox - Calamity
IppSec
24 HackTheBox - Shrek
HackTheBox - Shrek
IppSec
25 HackTheBox - Mirai
HackTheBox - Mirai
IppSec
26 HackTheBox - Shocker
HackTheBox - Shocker
IppSec
27 HackTheBox - Mantis
HackTheBox - Mantis
IppSec
28 HackTheBox - Node
HackTheBox - Node
IppSec
29 HackTheBox - Kotarak
HackTheBox - Kotarak
IppSec
30 HackTheBox - Enterprise
HackTheBox - Enterprise
IppSec
31 HackTheBox - Sense
HackTheBox - Sense
IppSec
32 HackTheBox - Minion
HackTheBox - Minion
IppSec
33 VulnHub - Sokar
VulnHub - Sokar
IppSec
34 VulnHub - Pinkys Palace v2
VulnHub - Pinkys Palace v2
IppSec
35 HackTheBox - Inception
HackTheBox - Inception
IppSec
36 Vulnhub - Trollcave 1.2
Vulnhub - Trollcave 1.2
IppSec
37 HackTheBox - Ariekei
HackTheBox - Ariekei
IppSec
38 HackTheBox - Flux Capacitor
HackTheBox - Flux Capacitor
IppSec
39 HackTheBox - Jeeves
HackTheBox - Jeeves
IppSec
40 HackTheBox - Tally
HackTheBox - Tally
IppSec
41 HackTheBox - CrimeStoppers
HackTheBox - CrimeStoppers
IppSec
42 HackTheBox - Fulcrum
HackTheBox - Fulcrum
IppSec
43 HackTheBox - Chatterbox
HackTheBox - Chatterbox
IppSec
44 HackTheBox - Falafel
HackTheBox - Falafel
IppSec
45 How To Create Empire Modules
How To Create Empire Modules
IppSec
46 HackTheBox - Nightmare
HackTheBox - Nightmare
IppSec
47 HackTheBox - Nightmarev2  - Speed Run/Unintended Solutions
HackTheBox - Nightmarev2 - Speed Run/Unintended Solutions
IppSec
48 HackTheBox - Bart
HackTheBox - Bart
IppSec
49 HackTheBox -  Aragog
HackTheBox - Aragog
IppSec
50 HackTheBox - Valentine
HackTheBox - Valentine
IppSec
51 HackTheBox - Silo
HackTheBox - Silo
IppSec
52 HackTheBox - Rabbit
HackTheBox - Rabbit
IppSec
53 HackTheBox - Celestial
HackTheBox - Celestial
IppSec
54 HackTheBox - Stratosphere
HackTheBox - Stratosphere
IppSec
55 HackTheBox - Poison
HackTheBox - Poison
IppSec
56 HackTheBox - Canape
HackTheBox - Canape
IppSec
57 HackTheBox - Olympus
HackTheBox - Olympus
IppSec
58 HackTheBox - Sunday
HackTheBox - Sunday
IppSec
59 HackTheBox - Fighter
HackTheBox - Fighter
IppSec
60 HackTheBox - Bounty
HackTheBox - Bounty
IppSec

Related AI Lessons

The Coded Human or Artificial Intelligence? And Does Artificial Intelligence Have a God?
Explore the intersection of AI and philosophy, examining if AI has a god and what it means for human understanding
Medium · AI
De técnico de redes a Red Teamer: la IA como ventaja competitiva en ciberseguridad
Learn how to leverage AI as a competitive advantage in cybersecurity, transitioning from a network technician to a Red Teamer
Medium · AI
De técnico de redes a Red Teamer: la IA como ventaja competitiva en ciberseguridad
Learn how to leverage AI as a competitive advantage in cybersecurity to transition from a network technician to a Red Teamer
Medium · Python
De técnico de redes a Red Teamer: la IA como ventaja competitiva en ciberseguridad
Learn how to leverage AI as a competitive advantage in cybersecurity to transition from a network technician to a Red Teamer
Medium · Cybersecurity

Chapters (11)

Introduction
1:30 Going over LDAP Injection, showing we can log in with a wild card for username
2:27 Showing the request in BurpSuite, going over how we can enumerate data via Boo
6:43 Quickly going over Binary Search/Divide and Conquer, unfortunately, we cannot
8:45 Start of creating our program, creating a TestPassword function, so we can rep
16:15 Creating a function that generates a lower alpha-numeric character set for us
20:40 Starting the Bruteforce Logic, making a function that will bruteforce a single
24:30 Making the Bruteforce function, which will bruteforce each character of the pa
26:30 Talking about an optimization we can do and how many requests each method of b
29:07 Creating the Prune Charset function, which will reduce our charset to only tho
32:13 Going over each function, cleaning up some if/then statements
Up next
AI Management Essentials: Integrating ISO 42001 & ISO 23894
Coursera
Watch →