00:00-Intro
00:44-Start of Nmap Scan and analyzing its results
01:12-Looking for exploits of vsftpd
02:35-Enumerating ftp by doing anonymous logins but failed
03:43-Enumerating port 80
06:00-Using BurpSuite to change the user-agent
09:40-Trying to BruteForce for different user-agents with Alphabets
10:18-bash script to generate alphabets from A-Z
11:56-Using Hydra to bruteforce the password for chris on FTP
13:32-Getting into FTP with chris and downloading all files
15:30-Start of steganography using different tools like steghide,binwalk and exiftool
19:00-Using zip2john to crack the password for the zip file
23:34-Found the username and password for james so lets ssh onto the box
24:37-Start of privilege escalation
26:34-Looking at the sudo privileges and getting root access
28:40-solving answers of Room and completing the room

свернуть