Скачать или смотреть Hack The Box CBBH Prep: Identification and Authentication Failures

Hack The Box: Navigating Baby Auth with Burp and Pwnbox

In this tutorial, we dive deep into Hack The Box's 'Baby Auth' challenge, exploring the nuances of web proxies and session handling. The video covers setting up your target in Hack The Box, using Pwnbox for connectivity, and the essentials of Burp Suite for web requests. You’ll learn how to recognize and exploit weak authentication mechanisms, specifically focusing on session abuse using Base64 encoded session IDs with tools like CyberChef. Join the hack the box communities on Discord to further enhance your learning journey.

=============================================================
Learning Objectives, Organizations and Companies Covered:

Learn how to practice ethical hacking safely
Learn about the OWASP Top 10: Identification and Authentication failures
Navigate the Linux command line
Learn about how HTTP manages state
Learn how to use web proxies like Burp Suite
Learn how session management works

Hack The Box: https://www.hackthebox.com/
OWASP Top 10: https://owasp.org/www-project-top-ten/
CyberChef: https://gchq.github.io/CyberChef/
=============================================================
Video Created by:

Robert "LTNBOB" Theisen

Lets Connect on LinkedIn:   / robertftheisen  
Personal Blog: https://bob.ltneighbor.net/
Join the LTN Labs learning community:   / discord  
Lets Connect on X: https://x.com/RobertFTheisen
Join the Live Stream on Twitch:   / ltn_bob  
=============================================================
Chapters

00:00 Introduction and Setup
00:48 Starting Baby Auth Challenge
03:25 Understanding Web Requests
04:56 Creating and Testing Accounts
06:47 Introduction to Burp Suite
10:57 Using Burp Suite for Session Hijacking
19:10 Conclusion and Community Engagement
=============================================================
Hashtags
#informationtechnology #informationsecurity #cybersecurity #ethicalhacking