Watch and track your favorite playlist.
Curated by: IppSec (543 videos)
00:00 - Intro 00:58 - Start of nmap 02:30 - Entering our IP Address in the "Is it Down" and see the server makes a curl back to us, trying command injection 05:30 - Could not do Command Injection, trying Argument Injection 09:00 - Bypassing the filter that requires the URL to start with http:// by using a space and then using file:// to get file disclosure 12:15 - Reading the source of index.php, discovering it has a hidden mode that lets us swap curl for netcat 15:00 - Getting a shell by using argument injection with netcat 16:30 - Discovering PSWM in a home directory, which is a password manager like application 19:20 - Building a script to crack the PSWM file 24:10 - PSWM is decrypted, getting the root credential