HackTheBox - Coder

Name: HackTheBox - Coder
Uploaded: 2023-12-16T15:02:00Z
Channel: IppSec
Description: 00:00 - Introduction 01:00 - Start of nmap 03:30 - Exploring the file share 07:15 - Finding Encrypter.exe, which is a dotnet encrypter. Discovering the...

IppSec · Beginner ·🧠 Large Language Models ·2y ago

00:00 - Introduction 01:00 - Start of nmap 03:30 - Exploring the file share 07:15 - Finding Encrypter.exe, which is a dotnet encrypter. Discovering the seed is based upon time, modifying it to decrypt using metadata from the encrypted file to get the seed. 15:30 - The encrypted file was a Keepass Database, looking into it and seeing credentials and a uthenticator backup 19:45 - Installing the "Authenticator" app and seeing the backup format is the same 21:30 - Explaining why we want to just bruteforce AES vs Argon2id 25:50 - Creating a program in javascript to bruteforce the AES by decrypting…

Watch on YouTube ↗ (saves to browser)

Chapters (17)

Introduction

1:00 Start of nmap

3:30 Exploring the file share

7:15 Finding Encrypter.exe, which is a dotnet encrypter. Discovering the seed is b

15:30 The encrypted file was a Keepass Database, looking into it and seeing credenti

19:45 Installing the "Authenticator" app and seeing the backup format is the same

21:30 Explaining why we want to just bruteforce AES vs Argon2id

25:50 Creating a program in javascript to bruteforce the AES by decrypting and exami

40:40 Cracking program done, then logging into TeamCity

45:45 We can't modify the files on TeamCity but we can use the personal build, suppl

49:50 Defender blocked nishang reverse shell, doing some quick obfuscation to bypass

55:50 Discovering Teamcity keeps track of personal builds, looking at old ones and d

1:08:00 Running the bloodhound python collector in a Docker

1:17:40 Writing a bloodhound query to show Organization Units in active directory, the

1:24:15 Explaining the attack path, e.blake can manipulate ADCS, s.blade can add machi

1:31:30 Creating and publishing the Vulnerable Certificate. Cloning computer, then mod

1:53:30 Doing an easier vulnerable template, to make this box vulnerable to ESC1. Set

Playlist

Uploads from IppSec · IppSec · 0 of 60

← Previous Next →

HackTheBox - Coder

Chapters (17)

Playlist

Lesson complete!