In Intentions from HackTheBox, I'll get a binary with the capabilities to read any file on the file system. This file will get an MD5 sum on the first N bytes of a file, where I control the filename and N. In this video, I'll show how to write a simple Python script that allows for reading any file on the file system by brute forcing it byte by byte.
Intentions Blog Post: https://0xdf.gitlab.io/2023/10/14/htb...
HTB Intentions: https://www.hackthebox.com/machines/i...
☕ Buy Me A Coffee: https://www.buymeacoffee.com/0xdf
[00:00] Introduction
[01:13] Overview of scanner
[02:17] Outline of main Python script
[05:38] Forgot we didn't finish!
[06:11] Using subprocess to get hash from scanner
[07:33] Using PDB to figure out syntax for stdout
[08:36] Brute forcing next byte
[09:52] Fixing output print
[10:22] Catching error from scanner
[11:45] Weirdness of scanner
[12:02] Showing success
#pentest #ctf #bugbounty
On this page of the site you can watch the video online Brute-Forcing File Read with MD5s [HackTheBox Intentions] with a duration of hours minute second in good quality, which was uploaded by the user 0xdf 14 October 2023, share the link with friends and acquaintances, this video has already been watched 938 times on youtube and it was liked by 44 viewers. Enjoy your viewing!