LBRY Block Explorer

LBRY Claims • cyberseclabs-casino-linux-walkthrough

fb52d72ba6586c63c081b898f7999813a3e67de8

Published By
@PinkDraconian
Created On
15 Dec 2021 13:36:26 UTC
Transaction ID
1812a9349e594a5e115b8d216272cf2856c5f0cb675a4db7f760c2f03a68fcf5
Cost
Safe for Work
Free
Yes
CyberSecLabs - Casino - Linux [Walkthrough]
▶️ YouTube: https://www.youtube.com/c/PinkDraconian
? Twitter: https://twitter.com/PinkDraconian
? TikTok: https://www.tiktok.com/@pinkdraconian
ℹ️ LinkedIn: https://www.linkedin.com/in/robbe-van-roey-365666195/
? Discord: PinkDraconian#9907
? Instagram: https://www.instagram.com/robbevanroey/
?️ Website: http://pinkdraconian.d4rkc0de.com/
?‍? HackTheBox: https://www.hackthebox.eu/home/users/profile/129531 Twitter: https://twitter.com/PinkDraconian
Discord: PinkDraconian#9907
Website: http://pinkdraconian.d4rkc0de.com/

Platform: CyberSecLabs

Platform Link: https://www.cyberseclabs.co.uk/

Category: Machine

OS: Linux

Challenge name: Casino

Difficulty: 7/10


00:00 Introduction
00:10 Nmap scan
00:30 Enumeration of port 80
01:20 Running Gobuster
02:20 Trying SSTI Server side template injection
04:00 Using XSS to grab admin cookie
06:30 Casino access
07:00 Exploiting SSRF to get access to an internally open port
09:00 Using RCE to get a ssh session on the box
12:40 Finding git repository with credentials
13:50 Using pythonpath to load and execute vulnerable module running as root
...
https://www.youtube.com/watch?v=ZwYqDZOvUpY
Author
Content Type
Unspecified
video/mp4
Language
English
Open in LBRY

More from the publisher

Controlling
VIDEO
CYBER
cyberseclabs-shock-linux-walkthrough
lbry://@PinkDraconian/cyberseclabs-shock-linux-walkthrough
▶️ YouTube: https://www.youtube.com/c/PinkDraconian ? Twitter: https://twitter.com/PinkDraconian ? TikTok: https://www.tiktok.com/@pinkdraconian ℹ️ LinkedIn: https://www.linkedin.com/in/robbe-van-roey-365666195/ ? Discord: PinkDraconian#9907 ? Instagram: https://www.instagram.com/robbevanroey/ ?️ Website: http://pinkdraconian.d4rkc0de.com/ ?‍? HackTheBox: https://www.hackthebox.eu/home/users/profile/129531 Twitter: https://twitter.com/PinkDraconian Discord: PinkDraconian#9907 Website: http://pinkdraconian.d4rkc0de.com/ Platform: CyberSecLabs Platform Link: https://www.cyberseclabs.co.uk/ Category: Machine OS: Linux Challenge name: Shock Difficulty: 1/10 00:00 Introduction 00:10 Nmap scan 00:40 Running gobuster to search for directories 01:20 We find cgi-bin folder, scanning that 02:10 Searching for apache cgi exploits, finding shellshock 02:50 Exploiting apache shellshock in metasploit 04:20 Explaining shellshock 06:40 Uploading and running linpeas using meterpreter 07:30 Sudo -l shows we can execute socat as root ... https://www.youtube.com/watch?v=AWyS60GMZzs
Transaction
Created
3 weeks ago
Content Type
Language
video/mp4
English
Controlling
VIDEO
CYBER
cyberseclabs-hijack-windows-walkthrough
lbry://@PinkDraconian/cyberseclabs-hijack-windows-walkthrough
▶️ YouTube: https://www.youtube.com/c/PinkDraconian ? Patreon: https://www.patreon.com/PinkDraconian ? Twitter: https://twitter.com/PinkDraconian ? TikTok: https://www.tiktok.com/@pinkdraconian ℹ️ LinkedIn: https://www.linkedin.com/in/robbe-van-roey-365666195/ ? Discord: PinkDraconian#9907 ? Instagram: https://www.instagram.com/robbevanroey/ ?️ Website: http://pinkdraconian.d4rkc0de.com/ ?‍? HackTheBox: https://www.hackthebox.eu/home/users/profile/129531 ? Reddit: https://www.reddit.com/user/PinkDraconian ☁️ Steam: https://steamcommunity.com/id/PinkDraconian ? GitHub: https://github.com/PinkDraconian Platform: CyberSecLabs Platform Link: https://www.cyberseclabs.co.uk/ Category: Machine OS: Windows Challenge name: Hijack Difficulty: 2/10 00:00 Introduction 00:10 Nmap scan 00:40 Drupal explanation 01:10 Explaining drupalgeddon 2 03:40 Manually exploiting drupalgeddon 2 06:00 DLL injection ... https://www.youtube.com/watch?v=ZfVNIBM1zHY
Transaction
Created
3 weeks ago
Content Type
Language
video/mp4
English
Controlling
VIDEO
CYBER
cyberseclabs-simple-linux-walkthrough
lbry://@PinkDraconian/cyberseclabs-simple-linux-walkthrough
▶️ YouTube: https://www.youtube.com/c/PinkDraconian ? Patreon: https://www.patreon.com/PinkDraconian ? Twitter: https://twitter.com/PinkDraconian ? TikTok: https://www.tiktok.com/@pinkdraconian ℹ️ LinkedIn: https://www.linkedin.com/in/robbe-van-roey-365666195/ ? Discord: PinkDraconian#9907 ? Instagram: https://www.instagram.com/robbevanroey/ ?️ Website: http://pinkdraconian.d4rkc0de.com/ ?‍? HackTheBox: https://www.hackthebox.eu/home/users/profile/129531 ? Reddit: https://www.reddit.com/user/PinkDraconian ☁️ Steam: https://steamcommunity.com/id/PinkDraconian ? GitHub: https://github.com/PinkDraconian Platform: CyberSecLabs Platform Link: https://www.cyberseclabs.co.uk/ Category: Machine OS: Linux Challenge name: Simple Difficulty: 1/10 00:00 Introduction 00:10 NMAP scan 00:40 Checking out CMS Made Simple 01:00 Running searchsploit 02:10 CMS Made Simple Time based SQLi exploit 05:00 CMS Made Simple Arbitrary file upload RCE 07:50 Getting a reverse shell using python3 09:30 Running Linux Smart Enumeration (lse.sh) 10:30 Exploiting systemctl with setuid ... https://www.youtube.com/watch?v=eBK3PFBXjfU
Transaction
Created
3 weeks ago
Content Type
Language
video/mp4
English
Controlling
VIDEO
BUG B
bug-bounty-recap-18-01-slack-blocked
lbry://@PinkDraconian/bug-bounty-recap-18-01-slack-blocked
... https://www.youtube.com/watch?v=9CJ7HgN4fzc
Transaction
Created
3 weeks ago
Content Type
Language
video/mp4
Controlling
VIDEO
? #BU
bbr120222
lbry://@PinkDraconian/bbr120222
? #BugBounty Recap ? ? February 12th ⏰ @Acronis Ticketing IDOR by @h4x0r_dz
Transaction
Created
3 weeks ago
Content Type
Language
video/mp4
English
Controlling
VIDEO
? #BU
bbr310122
lbry://@PinkDraconian/bbr310122
? #BugBounty Recap ? ? January 31th ⏰ @Omise XSS via X-Forwarded-Host header by OblivionLight
Transaction
Created
3 weeks ago
Content Type
Language
video/mp4
English
Controlling
VIDEO
HOW T
how-to-find-vulnerabilities-in-php-code
lbry://@PinkDraconian/how-to-find-vulnerabilities-in-php-code
SSD: Quick handling | Generous rewards | Done discreetly Check out SSD Secure Disclosure here: https://ssd-disclosure.com/ Or follow them on Twitter for security updates: https://twitter.com/SecuriTeam_SSD Check out their YouTube as well: https://www.youtube.com/channel/UC9ZnYbYqOe6Y3eRdw0TMz9Q ▶️ YouTube: https://www.youtube.com/c/PinkDraconian ? Patreon: https://www.patreon.com/PinkDraconian ? Twitter: https://twitter.com/PinkDraconian ? TikTok: https://www.tiktok.com/@pinkdraconian ℹ️ LinkedIn: https://www.linkedin.com/in/robbe-van-roey-365666195/ ? Discord: PinkDraconian#9907 ? Instagram: https://www.instagram.com/robbevanroey/ ?️ Website: http://pinkdraconian.d4rkc0de.com/ ?‍? HackTheBox: https://www.hackthebox.eu/home/users/profile/129531 ? Reddit: https://www.reddit.com/user/PinkDraconian ☁️ Steam: https://steamcommunity.com/id/PinkDraconian ? GitHub: https://github.com/PinkDraconian 00:00 Introduction 00:25 SSD Secure Disclosure 01:20 VoIPMonitor 02:45 Analysing PHP source code 09:25 Exploiting ... https://www.youtube.com/watch?v=MlRLEAh5tv4
Transaction
Created
3 weeks ago
Content Type
Language
video/mp4
English
Controlling
VIDEO
? BUG
bbr160122
lbry://@PinkDraconian/bbr160122
? #BugBounty Recap ? ? January 16th ⏰ @Twitter domain takeover by @iangcarroll
Transaction
Created
3 weeks ago
Content Type
Language
video/mp4
English
Controlling
VIDEO
REVER
reversing-where-did-he-go-inferno-ctf
lbry://@PinkDraconian/reversing-where-did-he-go-inferno-ctf
CTF: Inferno CTF Link: https://infernoctf.live/ CTFTime link: https://ctftime.org/event/951 Category: Reversing Challenge name: Where did he GO? Description: Get Set Go... Difficulty: 1/10 ... https://www.youtube.com/watch?v=i2fc-709q0A
Transaction
Created
3 weeks ago
Content Type
Language
video/mp4