HackTheBox - BankRobber

Name: HackTheBox - BankRobber
Uploaded: 2020-03-07T14:58:35Z
Channel: IppSec
Description: 00:59 - Begin of nmap, discover XAMPP 05:51 - Running GoBuster while we poke at the website 06:30 - Registering an account then seeing what new function...

IppSec · Intermediate ·🔐 Cybersecurity ·6y ago

00:59 - Begin of nmap, discover XAMPP 05:51 - Running GoBuster while we poke at the website 06:30 - Registering an account then seeing what new functions are avaialble 08:10 - Attempting to transfer money and discovering XSS 10:00 - Basic Cross Site Scripting worked, check cookies to see HttpOnly is false then do a basic XSS to steal cookies 15:33 - Doing the OnError payload to steal administrative cookie 17:38 - Logging in as the administrative user, checking out the new pages. Search which is SQL Injectable and BackDoorChecker which can execute code from localhost 19:10 - Playing with the S…

Watch on YouTube ↗ (saves to browser)

Chapters (17)

0:59 Begin of nmap, discover XAMPP

5:51 Running GoBuster while we poke at the website

6:30 Registering an account then seeing what new functions are avaialble

8:10 Attempting to transfer money and discovering XSS

10:00 Basic Cross Site Scripting worked, check cookies to see HttpOnly is false then

15:33 Doing the OnError payload to steal administrative cookie

17:38 Logging in as the administrative user, checking out the new pages. Search whic

19:10 Playing with the SQL Injection in Search, confirming it is union then sending

25:30 Using SQL Injection to read the source code via LOAD_FILE in a Union Injection

31:30 Creating a XSS Payload that can send a Post Request (XMLHttpRequest)

40:45 Reverse shell returned

46:20 Manually poking around the box, discover port 910 is open but our nmap didn't

48:10 Using Chisel to forward the port back to our box, and discover it's a telnet i

52:20 Using PwnTools to bruteforce the PIN Code on port 910

56:10 Send it 100 A's to see if the program crashes, instead it executesa payload af

1:01:00 Failing to run netcat froma UNC Path

1:08:26 Running netcat from C:\ to get a reverse shell

Playlist

Uploads from IppSec · IppSec · 0 of 60

← Previous Next →