HackTheBox - AI

01:05 - Begin of Recon 01:50 - Taking a look at the page, noticing the site is PHP, running GoBuster to find other PHP Files. 03:45 - Playing with the File Upload, failing to identify how uploaded files are stored 05:20 - Investigating PHP Files that GoBuster found, discovering 06:30 - Searching for Text to Speach programs (create WAV Files) 08:50 - The first program didn’t do a good job saving WAV Files, Downloading Festival 09:17 - Installing apt-file so we can use apt to search for what package contains a file (like yum whatprovides) 11:05 - Using text2wave to create wav files and upload them, then discover a SQL Injection over voice 14:04 - Having trouble getting the voice recognition to recognize the word union. Using ““ to discover alternative words. 19:10 - Extracting the username and password out of the database, then logging in via SSH 21:00 - Investigating how the file upload script works, turns out to be a dead end 23: