HackTheBox - Valentine

Name: HackTheBox - Valentine
Uploaded: 2018-07-28T15:00:01Z
Channel: IppSec
Description: 00:25 - Start of Recon, identifying end of life OS from nmap 03:20 - Running vulnerability scripts in nmap to discover heartbleed (In video on Blue, I g...

IppSec · Beginner ·🔐 Cybersecurity ·7y ago

00:25 - Start of Recon, identifying end of life OS from nmap 03:20 - Running vulnerability scripts in nmap to discover heartbleed (In video on Blue, I go a bit more in NMAP Scripts. https://www.youtube.com/watch?v=YRsfX6DW10E) 04:16 - Going to the HTTP Page to see what it looks like 06:30 - Begin of Heartbleed - Grabbing Python Module 07:13 - Explaining Heartbleed -- XKCD ftw 10:15 - Explaining and running the exploit 13:40 - Exporting large chunks of memory by running in a loop 14:10 - Finding an encrypted SSH Key on the server 15:35 - Examining heartbleed output to discover SSH Key Password …

Watch on YouTube ↗ (saves to browser)

Chapters (12)

0:25 Start of Recon, identifying end of life OS from nmap

3:20 Running vulnerability scripts in nmap to discover heartbleed

4:16 Going to the HTTP Page to see what it looks like

6:30 Begin of Heartbleed - Grabbing Python Module

7:13 Explaining Heartbleed -- XKCD ftw

10:15 Explaining and running the exploit

13:40 Exporting large chunks of memory by running in a loop

14:10 Finding an encrypted SSH Key on the server

15:35 Examining heartbleed output to discover SSH Key Password

17:45 SSH as low priv user returned

21:55 Finding a writable tmux socket to hijack session and find a root shell

23:50 Alternative Privesc, DirtyC0w

Playlist

Uploads from IppSec · IppSec · 0 of 60

← Previous Next →