01:05 - Begin of Recon
01:50 - Taking a look at the page, noticing the site is PHP, running GoBuster to find other PHP Files.
03:45 - Playing with the File Upload, failing to identify how uploaded files are stored
05:20 - Investigating PHP Files that GoBuster found, discovering
06:30 - Searching for Text to Speach programs (create WAV Files)
08:50 - The first program didn’t do a good job saving WAV Files, Downloading Festival
09:17 - Installing apt-file so we can use apt to search for what package contains a file (like yum whatprovides)
11:05 - Using text2wave to create wav files and upload them, then discover a SQL Injection over voice
14:04 - Having trouble getting the voice recognition to recognize the word union. Using ““ to discover alternative words.
19:10 - Extracting the username and password out of the database, then logging in via SSH
21:00 - Investigating how the file upload script works, turns out to be a dead end
23:
6 views
262
61
10 months ago 00:10:23 1
I Played HackTheBox For 30 Days - Here’s What I Learned
1 year ago 00:00:00 0
Хакерство для всех: понятные инструкции для начинающих | Иван Глинкин HydrAttack
1 year ago 00:04:06 1
Решаем “Тред Ариадны“ | TINKOFF CTF 2024 | EASY
1 year ago 00:32:44 19
HackTheBox - Analytics
1 year ago 00:34:38 2
HackTheBox - Manager
1 year ago 01:27:34 5
HackTheBox - AppSanity
1 year ago 00:37:18 6
HackTheBox - CozyHosting
1 year ago 00:41:25 5
HackTheBox - Visual
1 year ago 01:46:13 2
HackTheBox - Drive
1 year ago 01:12:42 4
HackTheBox - Builder
1 year ago 00:26:29 1
HackTheBox - Keeper
1 year ago 02:06:46 2
HackTheBox RegistryTwo
1 year ago 00:54:43 11
HackTheBox - Clicker
1 year ago 02:05:30 1
HackTheBox - Bookworm
1 year ago 00:33:44 1
Best Hacking Laptop 2023
1 year ago 00:27:16 1
Top Hacking Books for 2023
1 year ago 00:30:39 0
Прохождение Linux-машины средней сложности SANDWORM HackTheBox | КАК ПРОЙТИ
1 year ago 11:21:04 1
Bug Bounty Course 2024 Updated
1 year ago 07:22:03 1
Ultimate Guide to Ethical Hacking with Kali Linux #ethicalhacking #hacker
1 year ago 01:02:06 17
HackTheBox Zipping
1 year ago 00:16:21 18
HackTheBox - Sau
1 year ago 02:09:39 15
HackTheBox - Coder
2 years ago 00:29:19 2
Прохождение Linux-машины средней сложности SURVEILLANCE HackTheBox | КАК ПРОЙТИ