HackThebox - Wifinetic

Name: HackThebox - Wifinetic
Uploaded: 2023-09-16T14:15:43Z
Channel: IppSec
Description: 00:00 - Introduction 01:00 - Start of nmap 02:00 - Using wget to download all files from FTP then examining files, taking notes of the usernames 05:00 -...

IppSec · Beginner ·🔐 Cybersecurity ·2y ago

00:00 - Introduction 01:00 - Start of nmap 02:00 - Using wget to download all files from FTP then examining files, taking notes of the usernames 05:00 - Taking a look at the backup, discovering a password in the wireless config 06:45 - Using CrackMapExec to spray SSH with our password and getting a success with netadmin 09:15 - Running LinPeas to discover Reaver has the capability cap_net_raw 13:15 - Explaining why Reaver has this capability is interesting 14:40 - Running Reaver to attempt to brute force the WPS Pin and getting the WPA PSK which is also the root password 15:30 - Start of buil…

Watch on YouTube ↗ (saves to browser)

Chapters (15)

Introduction

1:00 Start of nmap

2:00 Using wget to download all files from FTP then examining files, taking notes o

5:00 Taking a look at the backup, discovering a password in the wireless config

6:45 Using CrackMapExec to spray SSH with our password and getting a success with n

9:15 Running LinPeas to discover Reaver has the capability cap_net_raw

13:15 Explaining why Reaver has this capability is interesting

14:40 Running Reaver to attempt to brute force the WPS Pin and getting the WPA PSK w

15:30 Start of building a bash script to spray a single password across valid users

22:00 Converting our script into a Bash Function so its easier to run without touchi

24:55 Talking about WPS and how this exploit worked

25:30 The first vulnerability in the WPS Pin, the eighth digit is just a checksum

28:30 The second flaw in WPS, the PIN is broken in half if the first four digits are

30:00 Showing the WSC Nack gets sent after Message 4 if the first four of the pin is

31:15 Changing the PIN and playing more with reaver to showcase how reaver works.

Playlist

Uploads from IppSec · IppSec · 0 of 60

← Previous Next →