Playing with Exploits - OMIGod

Name: Playing with Exploits - OMIGod
Uploaded: 2021-09-17T20:55:02Z
Channel: IppSec
Description: 00:00 - Intro 01:00 - Start of installing OMI Locally 03:00 - Downloading the exploit, but get a connection error because it cannot talk to OMI 03:45 - ...

IppSec · Beginner ·📰 AI News & Updates ·4y ago

00:00 - Intro 01:00 - Start of installing OMI Locally 03:00 - Downloading the exploit, but get a connection error because it cannot talk to OMI 03:45 - Editing the OMI Configuration to set it to listen on 5986 05:45 - The exploit still isn't working debugging to find it is missing a namespace 07:50 - Finding the SCX Package Name and using a Index.Of Google Dork to find it on an open HTTP directory 10:00 - Installing the SCX Agent and getting code execution 11:13 - Setting the exploit to go through BurpSuite so we can understand how it works 13:40 - Going over the blog post to understand why it…

Watch on YouTube ↗ (saves to browser)

Chapters (10)

Intro

1:00 Start of installing OMI Locally

3:00 Downloading the exploit, but get a connection error because it cannot talk to

3:45 Editing the OMI Configuration to set it to listen on 5986

5:45 The exploit still isn't working debugging to find it is missing a namespace

7:50 Finding the SCX Package Name and using a Index.Of Google Dork to find it on an

10:00 Installing the SCX Agent and getting code execution

11:13 Setting the exploit to go through BurpSuite so we can understand how it works

13:40 Going over the blog post to understand why it was vulnerable

16:35 Talking about how the researchers may have found it. MS Patched it without ma

Playlist

Uploads from IppSec · IppSec · 0 of 60

← Previous Next →

Playing with Exploits - OMIGod

Chapters (10)

Playlist

Lesson complete!