Скачать с ютуб Advanced Printer Exploitation | CTF Walkthrough в хорошем качестве

Advanced Printer Exploitation | CTF Walkthrough

In this video walk-through, we covered a difficult scenario of printer exploitation. We first interacted with the printer HP JetDirect running on port 9100 through the printer exploitation framework pret.py. We discovered an encrypted print job file with AES-CBC for which we found the decryption key using nvram dump in pret.py. The decrypted version was a PDF file documenting a service running on port 9000 named Feed Engine. To interact with the service, we used grpc tools and created a client script that sends requests through HTTP to the feed engine server. We used the client we created to probe for other internally opened ports and we discovered an Apache solr installation for we which we found an exploit and had the first shell. Privilege escalation was achieved by exploiting a periodically running service that exposes the SSH password and copies files from the machine into a docker container. ****** Receive Cyber Security Field Notes and Special Training Videos    / @motasemhamdan   ********** Writeup https://motasem-notes.net/advanced-pr... Intro to gRPC https://grpc.io/docs/languages/python... Apache Solr Exploit https://www.exploit-db.com/exploits/4... Gpher https://en.wikipedia.org/wiki/Gopher_...) HackTheBox Laser https://app.hackthebox.com/machines/269 ******** Patreon https://www.patreon.com/motasemhamdan... Instagram   / dev.stuxnet   Twitter   / manmotasem   Facebook   / motasemhamdantty   LinkedIn [1]:   / motasem-hamdan-7673289b   [2]:   / motasem-eldad-ha-bb42481b2   Website https://www.motasem-notes.net Backup channel    / @karppiandspecter-tvshows   My Movie channel:    / @motasemhamdanhacknotes   ******