Скачать или смотреть HackTheBox - CTF (SpeedRun)

-- LDAP Injection
00:00 - Port Scan
00:46 - Creating LDAP Attribute Wordlist
02:23 - Blind LDAP Injection With Double URL Encoding
02:38 - Writing Python Script To Automate Token Leaking
05:29 - Running Our Script Against Each LDAP Attribute
06:44 - Time Synchronization With Web Server + OTP Setup
07:54 - Bypassing Extra LDAP Query Constraint Using Null-byte Injection
09:09 - Extracting Password From Files
09:26 - SSH Access Granted

-- Cron Job Privilege Escalation
10:00 - Backup Script Discovery & Analysis
10:33 - Setting Directory Permission To World-Writable
11:08 - Creating Invalid 7zip Listfile (Symbolic Link To root.txt)
11:25 - Leaking Flag Content Generated By Script Warning

Thank you for watching! Please subscribe and like to support the channel :)