In Intentions from HackTheBox, I'll get a binary with the capabilities to read any file on the file system. This file will get an MD5 sum on the first N bytes of a file, where I control the filename and N. In this video, I'll show how to write a simple Python script that allows for reading any file on the file system by brute forcing it byte by byte.
Intentions Blog Post: https://0xdf.gitlab.io/2023/10/14/htb...
HTB Intentions: https://www.hackthebox.com/machines/i...
☕ Buy Me A Coffee: https://www.buymeacoffee.com/0xdf
[00:00] Introduction
[01:13] Overview of scanner
[02:17] Outline of main Python script
[05:38] Forgot we didn't finish!
[06:11] Using subprocess to get hash from scanner
[07:33] Using PDB to figure out syntax for stdout
[08:36] Brute forcing next byte
[09:52] Fixing output print
[10:22] Catching error from scanner
[11:45] Weirdness of scanner
[12:02] Showing success
#pentest #ctf #bugbounty
На этой странице сайта вы можете посмотреть видео онлайн Brute-Forcing File Read with MD5s [HackTheBox Intentions] длительностью часов минут секунд в хорошем качестве, которое загрузил пользователь 0xdf 14 Октябрь 2023, поделитесь ссылкой с друзьями и знакомыми, на youtube это видео уже посмотрели 938 раз и оно понравилось 44 зрителям. Приятного просмотра!