Hack The Box CBBH Prep: Identification and Authentication Failures скачать в хорошем качестве

Hack The Box CBBH Prep: Identification and Authentication Failures

Hack The Box: Navigating Baby Auth with Burp and Pwnbox In this tutorial, we dive deep into Hack The Box's 'Baby Auth' challenge, exploring the nuances of web proxies and session handling. The video covers setting up your target in Hack The Box, using Pwnbox for connectivity, and the essentials of Burp Suite for web requests. You’ll learn how to recognize and exploit weak authentication mechanisms, specifically focusing on session abuse using Base64 encoded session IDs with tools like CyberChef. Join the hack the box communities on Discord to further enhance your learning journey. ============================================================= Learning Objectives, Organizations and Companies Covered: Learn how to practice ethical hacking safely Learn about the OWASP Top 10: Identification and Authentication failures Navigate the Linux command line Learn about how HTTP manages state Learn how to use web proxies like Burp Suite Learn how session management works Hack The Box: https://www.hackthebox.com/ OWASP Top 10: https://owasp.org/www-project-top-ten/ CyberChef: https://gchq.github.io/CyberChef/ ============================================================= Video Created by: Robert "LTNBOB" Theisen Lets Connect on LinkedIn:   / robertftheisen   Personal Blog: https://bob.ltneighbor.net/ Join the LTN Labs learning community:   / discord   Lets Connect on X: https://x.com/RobertFTheisen Join the Live Stream on Twitch:   / ltn_bob   ============================================================= Chapters 00:00 Introduction and Setup 00:48 Starting Baby Auth Challenge 03:25 Understanding Web Requests 04:56 Creating and Testing Accounts 06:47 Introduction to Burp Suite 10:57 Using Burp Suite for Session Hijacking 19:10 Conclusion and Community Engagement ============================================================= Hashtags #informationtechnology #informationsecurity #cybersecurity #ethicalhacking