Скачать или смотреть HackTheBox Walkthrough - Unified

A deep dive walkthrough of the Unified machine on Hack The Box. Learn about Log4j & build pentesting skills useful in all domains of cyber security by starting out with beginner level walkthroughs like this!

------ Contents of video ------
0:00 - Intro & Machine Background
3:55 - Enumeration
7:45 - Web Server Enumeration
10:18 - (optional) Configure Burp for HTTPS
13:40 - Analyzing HTTP Traffic for Log4j
15:31 - Breaking Down a Log4j Payload
21:00 - Identifying Vulnerable Parameters
27:45 - Installing Dependencies
32:30 - Building a Log4j Payload
40:15 - Initial Foothold
42:00 - Local Privilege Escalation
57:45 - Outro

Zero Point Security Courses (Affiliate Links):
Red Team Ops - { https://courses.zeropointsecurity.co.... }
C2 Development in C# - { https://courses.zeropointsecurity.co.... }
Offensive Driver Development - { https://courses.zeropointsecurity.co.... }

My GitHub Repo (with notes on topics used in this video):
https://github.com/jakescheetz/OSCP

Extra Resources on Expression Language Vulnerabilities:
EL - https://pulsesecurity.co.nz/articles/...

Real World Example // Attacking log4j:
https://www.lunasec.io/docs/blog/log4...

LDAP for beginners:
https://www.okta.com/identity-101/wha...

#hackTheBox #walkthrough #unified #tutorial #startingpoint #startingpointtrack #hacktheboxunified #log4j