HackTheBox - Timelapse

Рет қаралды 29,341

Күн бұрын

00:00 - Intro
01:00 - Start of nmap
03:50 - Enumerating the file server
06:30 - Cracking the zip file with John
08:40 - Cracking the pfx file (PKCS12) with John
10:27 - Extracting the certificate and key from the pfx file
11:24 - Using evil-winrm to login with the certificate
14:40 - Checking the PSReadline file and getting another credential
16:05 - Logging in with svc_deploy, failing to run bloodhound
21:00 - Running net user discovering we are in LAPS Group
23:00 - Running get-adcomputer to get the LAPS Password
27:00 - Showing a python script to extract LAPS Passwords

Пікірлер: 38

@theSoloMimic Жыл бұрын

Interesting again to watch. Learned a few more things. Thanks 🙏 ippsec.

@saketsrv9068 Жыл бұрын

Kudos for the consistency

@isojama1 9 ай бұрын

Just started to watch your videos. Damn, your're good or your videos are at higher speed :D

@bushayijadavid803 Жыл бұрын

timelapse.htp instead of timelapse.htb at 21:20

@Masterofshnow Жыл бұрын

You typoed the Domain timelaps.htp not timelaps.htb

@kennethsantiago6517 2 ай бұрын

This is awesome ! im just new in learning pentesting/ethical hacking, I want to learn hopefully you can have a live sessions to teach someone like me. I'm going to watch all your vids thank you

@user-lg7zy2od4f Жыл бұрын

06:46 Is the "kracken" an another vm to run crack password? where can I find its subject

@0kdud3 Жыл бұрын

@sb77de Жыл бұрын

What's the dollar sign in hosts for?

@wahabwahab2042 Жыл бұрын

i wanted to try on begginer machines ,and i found that machine on htb, but honestly i am feelin this machine is kind of hard to me ! what should do to get into the beginner level ?

@ghsinfosec Жыл бұрын

This was a fun box!

@dadamnmayne Жыл бұрын

28:40 impacket has it all

@Lacsap3366 Жыл бұрын

how can you scroll and paste when using tmux? I stopped using tmux because it always messes that up.

@ohmsohmsohms Ай бұрын

Ctrl b [ Pasting is ctrl shift v that’s normal

@user-vj7fu3lx1x Жыл бұрын

Great!

@juhofinnish420 Жыл бұрын

i think you forgot overgraph box video to upload :) . thanks by the way.

@kazhiroma9736 11 ай бұрын

Hey man shouldn’t this be in windows playlist? Good vid regardless

@ippsec 11 ай бұрын

Fixed thanks.

@tokyorockstarVALORANT Ай бұрын

hello ippsec, where do i go to learn all these things?

@ohmsohmsohms Ай бұрын

Htb academy

@muslaghmani1066 Жыл бұрын

hows it going

@jarsal_firahel 4 ай бұрын

wow, no idea how you get the knowledge to do all this without write up. And to think this is an easy box !

@darkcat7872 Жыл бұрын

Can someone explain what could be wrong here 16:00? Throws: digesterror.

@oliver1231033 Жыл бұрын

same :(

@Ms.Robot. Жыл бұрын

Well done 🤩

@nhatminhpham354 Жыл бұрын

this should be a windows machine am I right?

@henrycook859 Жыл бұрын

Please do a box on DirtyCred!

@WhatsTheWorldComingTo Жыл бұрын

Could someone explain why each line of the hosts file at 01:51 has a $ at the end? Even the comment on line 4. Thank you.

@WhatsTheWorldComingTo Жыл бұрын

@sqw23 thank you!

@doanthanh5177 Жыл бұрын

Hi IppSec, thanks for your good contents as always. I want to ask if I could reupload your video to other platform?

@oladipupolawal2435 Жыл бұрын

You didn't do anything stupid, you only showed you're human.

@d1mm0n3 Жыл бұрын

It confused me too. Logged in as Administrator, moved into its Desktop. No flag. WHERE?! So, I started listing entire system with Get-ChildItem and found it. That was fun)

@sb77de Жыл бұрын

btw there's built-in up and download in evil-winrm