That python bruteforcer is a lifesaver

john: makes a py script out of nothing in less than 2 minutes me on google: "how to declare a variable"

As a developer - very interesting to see your approach to finding weaknesses. I can sort of see the fun in this kind of activity, the lure of the dark side :)

Nice vid John :) Btw : The "balls have zero to me" stuff was from an experiment, letting 2 AIs talk to each other with a set alphabet but no actual grammatical rules. After a while, they just came up with their own way of communicating :D

love the content and the way you explain everything so thoroughly! id also much rather see you walk through a script like that than if you didnt

heretic, not confirming with ls after mkdir.

Learnt a lot through this live walkthrough, well narrated and explained. The best part is the way you put out your way of approaching the next possibility, that definitely helped me in knowing how to process my thoughts during a CTF

John, I must say please do more of these vids are awesome and the talking through your process is exceptional

Hey John, been loving how much detail you go into when doing these videos. Keep up the great content!

I wanted it for 1 time and will be watching it for a few more times to note all the things taught here. Thank you so much for your efforts. I do respect you and your talent. 😇

wow... exploiting the tar wildcard to set the SUID bit on /bin/bash is so freaking smart and cool man, I was stunned by how amazing that was. I'm trying to better myself at pentesting and John, you are teaching me amazing things! Thank you so much!

This was incredible. Thanks for the content John!

This is probably the most educational video on the topic I've ever seen, and I've seen a lot. Amazing.

Holyyyy that curl to python requests and the bruter you wrote just blew my mind. Good stuff John I really love your videos.

Amazing videos with great explanations to beginners instead of just cruising through all the answers without explaining the reasoning behind anything.

Love this approach John. Its raw, honest and not contrived (i.e. doesnt come over as you've already completed it and are now just going back through the motions!). Its far more enjoyable to listen to your thought process this way, and you still seem to manage to keep things easy to understand. Nice work :-) Subbed.

Been loathing reading all those articles about wildcard injection.... Thanks for the video man :)

this video was awesome! i learned Sooooo much! thank you so much john, your the man brother!

Had a great time watch you work your magic. Im still learning and watching your videos really helps! Thanks john

Thank you very much for each video you upload. I am a cybersecurity student and always I get upset, I put one of your video and get motivated to keep on.. thank you 🙏

RIP all terminator references.

That tar exploit is INSANE, how have I *never* heard of "the * exploit"??

Just found your channel and subscribed. Awesome videos and explanations

Thanks for this I was having trouble with the tar wildcard portion!

You are amazing! Thanks for the walk through!

Great video like walk throughs to see your process.

I liked how you used curl to trigger the call back. I will start bringing that into my process

CTFs are so fascinating ..enjoyable content! keep it coming!

This was one of your best vids so far

dude, you rock! This was awesome. when I saw the bash-4.3# i was like 😁😁😁

super creative privelage escalation john! amazing content please keep it coming!

Ah Skynet. One of the best loved THM rooms, I believe. Out of curiosity, I just looked at the conclusion in my own notes and it says "probably my favorite ctf to date." :)

Sir u really are a very humble person ❤️❤️

I was as excited as you are when you privilege escalated. This is simply amazing.

That was incredible thanks for your work

Omg. More content! My brain cant keep up. Its literally regurgitating info at this point but im plugged back in . Leggo peeps and thank you once again Mr John !

this video inspired me more...thanks John

you explain everything so simply ❤️ thanks bruhhh 😘😘

Thanks John, I always learn something new

Awesome! You are online person out there who cares to explain stuff! Love Your videos!

Please keep making contents like this, we really enjoy watching your vids ,thankss

John please stop apologizing for doing exactly what we need (going into detail about how you as a pentester would approach this) Its exactly why I love this channel.. its not generic like the others. So please stop and carry on.

i enjoyed every single moment of this

Good work. Well done. Learned a lot!

i learned a lot from your videos thanks

Thank you for an amazing informative educational video ❤️

Buddy you are the best I ever seen so far 😍😍😍

Thanks for another fun and educational video boss!

This video is my favorite so far

so happy that ur channel exists

please always go off on tangents like the python one in this video, if anything..... go on to do a video about the tangent and go off into a tangent in that video and then do a video of that tangent and so on and so on, your videos quite literally pushed me in the direction of doing my (now a year in) degree in cybersecurity and the tryhack me rooms, you sir are a legend , thank you for your work

Simply a huge thanks ✊

This was so much fun!

really great live premiere and overall video!

I don’t know what is going on but this seems interesting haha

Very nice, thanks for showcasing your way of solving this room. I tried it this morning before I looked at your video. Since I cannot code in python I had a similar script as bash script, but never made it working because I forgot sending the hidden fields .. I don't know if the room is an easy one, I was lost after finding the user.txt Still a lot to learn I guess :)

nothing better then this..john...explnation is wonderfull :)

It seems like I've found my new favourite channel

Can't tell how much I appreciate this was so confused at root privilege escalation lol

loved your bin bash suid. My lazy version is simply doing that to the /etc/passwd and login as root. Have all the info I need in a file that I just copy paste everytime! Nice and quick

*John:* "Oh, we have a personal SMB share named milesdyson, that seems random." *Me:* Wait... does John not realize who Miles Dyson was in the Terminator universe? *John (5 mins later):* "I actually haven't seen the Terminator movies." *Me:* ...aha, well that explains that.

Great content John, could tell you hadn’t watched the terminator movies once you seem to overlook the miles dyson reference. :-) What sort of hardware and software setup would you recommend for a beginner?

that wildcard priv-esc is just super nice

curl to python... :O how did i not know about this, where has this been my whole life!?

I can’t believe that I have seen a 1 hour video on KZfaq and want more

So clear, so good!

Nice video. Learned a lot from that.

When you got to that Miles Dyson Personal Page i was sure that the picture had steganography in it.. :D But where it continued were so much better

yo awesome vid, crystal clear thanks

Extremly funny, thank you.

I love it! thank you.

dude this is awesome!

Awesome as always

That was a very Interesting video, thank you for this amazing content ! 😁👍

Thank you!

Big ups! Great content 👍👍

Awesome video!

Sweet Video! Didn't understand 95%, but it looked cool :)

Thank you very much.

Hello John, could you do the Daily Bugle room on T.H.M.? I love the way you approach things and explain them.

Love the video!

awsome work i love u so much

Awesome video

thanks man!

Awesome vid! 👌

Great content

So awesome!

Nice execution.

I'm not gonna lie, I was super annoyed once I realized how much work had to be put in at the end lol. I thought I was a rockstar until it got to the cuppa part. Then getting that stable shell and actually figuring out what to do? Infuriating. Thank you for your time an mentorship doing rooms like this for us. I wish this was something I could do on my own, but maybe THM is designed just for walkthroughs just like this so we can learn.

John Hammond for president everyone!

Awesome John Hammond but you let me down by not watching the terminator movie just kidding, if you do get the chance only watch 1 & 2 don't bother with the rest. lol

Excellent

Love ur vids

thank you very mush. this was helpfull

thank you, thank you, thank you!

that SUID trick was cool

On the part where you used python to check for logins i'm pretty sure you could use a session to make it a lot faster. s = requests.Session() s.post(url)

LastPass better sponsor you now. Nice placement right there.

That was nice, John

You are great!