Tier 2: Included - HackTheBox Starting Point - Full Walkthrough скачать в хорошем качестве

Tier 2: Included - HackTheBox Starting Point - Full Walkthrough

Learn the basics of Penetration Testing: Video walkthrough for the "Included" machine from tier two of the ‪@HackTheBox‬ "Starting Point" track; "don't forget to contemplate". We'll be exploring the basics of enumeration, service discovery, feeding Masscan results to NMap, dirbusting, LFI, RFI, PHP filter tricks, TFTP, post-exploitation (uncovering plaintext credentials, linpeas), privilege escalation (LXD/LXC group containers) and more! Write-ups/tutorials aimed at beginners - Hope you enjoy 🙂 #HackTheBox #HTB #CTF #Pentesting #OffSec Sign up for HackTheBox: https://hacktheboxltd.sjv.io/xk75Yk ↢HackTheBox↣ https://affiliate.hackthebox.com/cryp...   / hackthebox_eu     / discord   👷‍♂️Resources🛠 https://cryptocat.me/resources Start: 0:00 Masscan-to-NMap script: 1:15 Quickly scan all ports (Masscan): 1:58 Scan HTTP server (Nikto): 3:30 Dirbusting (Gobuster): 4:05 Scan missing UDP ports (NMap): 4:57 Local File Inclusion (LFI): 6:40 PHP filter trick: 8:30 Test for RFI: 12:05 Investigate TFTP: 13:14 Upload PHP shell: 14:45 Upgrade to fully interactive: 18:08 Search for credentials: 18:45 Catch up on questions: 19:50 Explore Privilege Escalation (lxd group): 20:40 Run LinPEAS.sh script: 21:45 LXC/LXD container PrivEsc: 24:50 Submit user/root flags: 28:35 End: 29:13