Скачать или смотреть Hack The Box CBBH Prep: Security Misconfiguration

OWASP Top 10 Challenge: Exploiting Security Misconfigurations

In this episode, we walk through an OWASP Top 10 challenge, focusing on security misconfigurations by exploiting a vulnerable NGINX configuration generator. Learn how to prepare your hacking environment, use web proxies, and crack password hashes to gain access to a web application. This detailed guide aims to make the process more seamless and encourages both beginners and experienced hackers to engage with hands-on cybersecurity exercises.

=============================================================
Learning Objectives, Organizations and Companies Covered:

Learn how to practice ethical hacking safely
Learn about the OWASP Top 10: Security Misconfiguration
Navigate the Linux command line
Learn how to study the behavior of a basic web app
Learn how to extract tar balls/compressed folders
Learn how to view and browse a database using sqlite browser
Learn how to crack MD5 hashes
Learn the basics of NGINX
Learn how to use AI tools like ChatGPT to augment your research and studying

Hack The Box: https://www.hackthebox.com/
OWASP Top 10: https://owasp.org/www-project-top-ten/
DB Browser for SQLite: https://sqlitebrowser.org/
Crackstation: https://crackstation.net/
ChatGPT: https://chatgpt.com/
=============================================================
Video Created by:

Robert "LTNBOB" Theisen

Lets Connect on LinkedIn:   / robertftheisen  
Personal Blog: ttps://bob.ltneighbor.net/
Join the LTN Labs learning community:   / discord  
Join the Hack The Box Discord:   / discord  
Lets Connect on X: https://x.com/RobertFTheisen
Join the Live Stream on Twitch:   / ltn_bob  

=============================================================
Chapters

00:00 Introduction and Setup
00:09 Understanding the Challenge
00:16 Preparation and Approach
01:55 Exploring the Web Challenge
02:34 Learning About NGINX
03:22 Using ChatGPT for Assistance
05:50 Creating an Account
08:25 Generating and Analyzing Config Files
10:00 Extracting and Examining the Database
14:13 Cracking Passwords
16:26 Logging In and Finding the Flag
17:13 Conclusion and Key Takeaways

=============================================================
Hashtags
#informationtechnology #informationsecurity #cybersecurity #owasptop10 #chatgpt