KING OF THE HILL - LIVE w/ NahamSec & STÖK!

he's so smooth cool my side is live so I'm happy to jam with you guys so you have not done king of the hill before is that right absolutely we have never done it all right so we're no idea what's going on so what would you like to do like what are you comfortable with I'm I don't really care you be fair so that might limit our capabilities a little bit okay if there is a web component to hide I can you know maybe ninja my way through but yeah that's about it so what I sometimes do and have been usually for these kind of streams has been like sharing the link to a private game in the chat so a bunch of other people can kind of climb in it's a race to like join the game with us I don't know if you guys would like to do that or if you just like hey should we go walk through or kind of a box together so you get the feel for it what are you comfortable with let's do this Ashi around or superhero optional CTF you guys around and want to play this with us offline yeah yep Ashutosh yeah yeah let's get Ashe in here should we bring everybody on voice absolutely awesome this is super cool oh yeah let's get superhero yeah I'm gonna go to super heros twitch what do you mean while you're doing that I'm gonna I'm gonna get a drink that's primarily how this works so that prepare and I'll be back I'm messaging superhero okay awesome I can message optional let's bring ok this message optional yeah let's bring optional into here I'll bring ash and superhero and we're gonna get slaughtered bro should I be the one to create the private game you yeah you quit the private game I'm gonna invite superhero right now I just uh I feel bad because I just pretty much told him to like stop his dream and join us I feel bad I'm hanging up I can't add him on this cord he left I can't hide you on thank you for the ride superhero you should have streamed this with us but I appreciate your doing the raid let's get you in here that if you're watching I need you to send me a request on this court it's not letting me send your ad unfortunately since you're not there I have to add you to become friends ash if you want to join us man maybe you can you can invite them to the chat we're talking about supe what oh you're here yeah you want ad super here to discuss why I should put on some C matrix to get some good visuals or something yeah you got to be easy on you guys got to be easy on us a little bit at least on me because after the web portion you know when it gets to getting some prison escalation stuff in there is where it gets a little tricky for me I'm just super new to this that's all right we're here for fun we're gonna play but I'm excited to try this out I've been trying to do this for a while alright playing king of the hill try hack me can you hear me now hey what a party this is great then you're sending out your Berk maybe you should switch that to whatever thinking that we're doing yeah I'm just waiting for John to spin up a new machine and I just don't want to remove your camera you know that's cool so what do we need to do and do we need to do anything on you know the hill thingy or you know drawing up on your machine but we need to get fantastic or not fantastic oh sorry wouldn't you get optional in here if anyone has access to I just pinned him and I get a get him to accept my friend request to add him in cool cool awesome awesome it's optional guess who you hiding optional any other streamers on items you play this at all if you want to join us yeah well I severely underhyped this event if we're gonna get everybody and this is fantastic yeah I mean we gotta make a party out of it that's nice night in jump on dude just send me a ad and I'll add you if you want to play with us yep I'm gonna sing gonna add on discord anyways let's see sending you a friend request right now you say let me run down says I don't think he was ready he go team which are this is a big thanks for thanks for joining superhero hey John with that yeah John is in here with us how's it going maybe bump the audio low bit more there we go oh this is awesome I hope that you guys are getting like my good mic because my actual microphone is being used for the stream I don't know what is going through to your side my webcam or something no Nate sounds good sounds cool cool you sound perfect man alright let's do this has anyone besides John and optional played this game up the hill before no but to get our asses handed so what do we want do we want just all of us in a private game so there's like no what crazy yeah immunity pressure yeah yeah let's just do all of us cuz I feel like someone's like watch and it's like haha I know how to own these guys losers [Laughter] alrighty we got everyone we want then I can spin it up as long as you have optional coming in ok what box do we want to do does anyone have a preference so I have not seen panda fortune or hackers don't want such a window hackus okay let's do let's not do windows you said not windows right our team and we do fun yeah when I was talking with skinny he was saying like yeah you should do Pat it we should put on some uh kung fu kung fu fighting music right pan I got you all right so I occurred in five minutes and I will share the invite link with you all in case anyone gets crazy and Han Jem what if we do this towards the end we'll just open up to the chat no absolutely I don't know if we want to sign up yeah we'll try it sign up with that link we're gonna send you guys uh yeah we'll see if it works make sure all of us join in first yes we're not gonna share it just yet and they enjoy the music but I have to be connected to the VPN with my machine alright yeah yeah cuz I'm still working on that I reset all my p.m. I'm playing the music for you guys in case you die here hold on so you guys could hear him too yeah there we go all right let's start the link so hopefully no one cleanse in behave everybody behave wait how do I know if I'm in this now I went to your language that mean I'm in if you have another browser you should be I see optional afterthoughts appearance talk oh I get my ass kicked so bad I can feel it hey I'm with you superhero do what it says only intermediate and advanced so level users can play if you go to your profile you can totally change how elite you are in the about you section I think your experience level you can choose here so you need to be goober leet hacks or so just intercept the update about it and I can just make an advance okay I thought it was something like I gotta go in there like setting a post request catch it and like make myself advance yeah alright so I see me wait there's a bunch of random people in here oh so it might have been spoiled hopefully there aren't too many that are kind people now it's all good if you're if you got the land good for you play along with us just don't you know don't mess this up well let's just show up am I good to share the the king of the held an idea with it right cuz it's not the invite link I should be okay hopefully it's okay yeah if anything we're just going all out don't matter I feel like options I was sitting in your an optional just sitting in a corner like I think I have fun we're to jam all right I'm here for a good time right I still have no idea what we're doing and so you go to that same so go to your profile although your when you click profile at the bottom of the page it says at the top it says about you go to about you and then your experience somewhere is at the bottom make that intermediate or advanced and then login - oh you already in here you're good you just have to wait yeah we're gonna start in one minute one minute yeah one minute sorry I thought you were not getting in yet I like how Benny's into UK for some am i oh yeah why oh it's a VPN that's why I'm using their the VPN Eddie gave us that could be why I'm using the same one oh I guess I'm an honorary bit today you can be this is like some of the hardest thing for me to stream because I'm like frantically thinking and I can never get like actually quality sentences or actual explanations out as to what's happening so I hope I hope we have fun and we hope we do it okay yeah I'm gonna be the most worthless one yes everyone's connected to the VPN I'm connected that's sweet Stoke you and I have the same boat my friend you you'll be fine I see boxes up I think boxes up yeah sweet sweet alright so we do talk out loud what we do is just share everything what we're doing so yeah I think the first best move is to nmap to kind of see hey what services are available you can normally trust there's a webpage open so you can just kind of hammer right over there on your web browser I have failed I don't have my Cali box open so oh I forgot I can't just yeah I can't what I have double yourself I'm running in my bike and I'm all prepared on my VPS but yeah oh crap how do I get my alley rube back up come on don't do this to me last a costume I did like my VPN was not cooperating I had like two going and completely ruined myself so it's always classic for something just choke you at the very beginning of the game I just deployed a Cali machine I'm gonna be behind a little bit no worries I'm gonna try and do like arbitrary pours just to make sure I don't miss anything I'm literally going 84 43 80 80 I'm waiting for optional to strike and immediately have king yeah this kid I do every books early already found something oh I see a wordpress same wow I feel have been created right now I'm so bad at WordPress like I always used oh there's an but it just fails for me there's our blog okay let's do this I can do this apart alright let's do some directory before sing Oh does he need a domain name set that's weird I also see a interesting string if anybody pops anything at least let us now I think I see a flag in slash flag I'm gonna use classic bin ASCII and I put the ass in oh it's friggin base64 yes that's definitely getting this other thing here dang optional strikes with their flags oh you found a I'm pretty sure I found the same one eg King Wow someone's cruising that wasn't a flag so that one's kind of tricky the one that you see in slash flag if that's the one that you're looking at it looks like it's hex encoded and when you hex unencoded it is a base64 is that another rabbit hole no no that's definitely gonna end up giving you a flag eventually all right on the board nice so what does the flags look like use a random number or typically just ashes yeah sorry go ahead okay I think it's a 16 long 16 character long or something takes a long string alright so if we do this next week I got a boot up the counter the next before we meet up I gotta put your tools that I want on that and then we can go about our day know someone's already I'm doing rock and doing stuff manually right now until Kali comes up [Music] that's noodles me too but who doesn't love noodles man Oh me and Ben we are the best when it comes to getting ramen though oh man ramen is I think for life apartment yep alright there were some ports in there that I probably should have paid attention to my end map skin came back someone think try and map scanning that's what I'm literally trying to do but I don't have a I don't have a cally box yet so it surprises me you aren't like a Linux on your host guy no because I won I hated virtual machines and B I always just use my tournament I just you know ssh out yeah so like you know i don't have a use for it why would i want to you know use my resources for that which now it makes sense why right like i need it for this kinds of scenarios let them learn my friend anyone checking out that SMB share not yet i see one on yeah four four four five I don't have SMB map installed all right okay okay also see some tomcat on 8080 supposedly maybe in a small map have you guys gone through that like I slash icons there's there's a lot of stuff in there oh really yeah a port a so the way owns poor lady icons just like a lot of eye comes in there and there's a SVG file Deb Apache are a lot of these the defaults that come with Apache or knife here but it looks like it has a folder by the guy in the method daughter though might just be something interesting there Oh Daniel pictures Oh understand but that was a binary but it just prints hello so I loaded into two gdb but there is nothing as of now draw okay does anyone know what panda thought th MS yeah I saw that too yeah I don't see anything for it yet isn't under user Gabby [Music] anyone fire off WP scan I haven't found it is talking about anything comes back from that I've found another flag also iPhone oho I neveri by the way that's not gonna be easy for me damn where's the binary and Samba I don't know I'm bad at something no there is something in samba okay good to know this bothers me that liyan prepared to have a machine Oh none of my tools are here I'm like browsing the web slowly as usual how do you do that binary one so you go into Samba client - capital L with IP and then you get a list of the Samba shares that are available and there's an anonymous share so you do some buckland / / IP / anonymous and then you just any password and you might get binary let me try this because I've never actually done that this is enter workgroup for root password is that for me or yeah you can do whatever you want is there anything interesting in that it looks like that flag done like you said yeah exactly optional I'm doing it in the sea in the folder did you ever get afar I'm saying [Music] anyone got someone some people are king uh-oh there seems to be something in the binomial yeah with king of the hill even the smallest things actually I'm not getting actually dealing with that anonymous when is that in the anonymous or yes yes anonymous yeah I did SMB client - ow / / / IP / anonymous and look in the disk wat and I put it there you try it this way so the L is only for the initial listing and then you kind of go on without it I'm like blindly looking at this Tomcat random viewer sitting again with Six Flags damn but I'm still on my second flag I got zero that's perfect I'm just loving this there's so much stress in this game Oh God have you guys a numerate the what press a little bit further I have no present yet WP scan [ __ ] were telling you something quite nice didn't for me so I'm doing something wrong yeah so I'm I was there trying to I have the username but besides my chart this whole time I have nothing yeah this doesn't work for me I'm trying to try it again assembly kind thing chat if you guys see anything wrong I'd appreciate help ok WordPress is there so do you actually find a ver WordPress site I can yeah that's - WordPress I just guessed it I know it's there did you guys use a little go buster order bus or anything sometimes I'm just saying directory search right now nice nice yeah does that word person needs a slash WordPress there no I don't know update man just go I mean I should update so these do get binary and gives you this [Music] you have to do anything with it nope all right give me underscore I mean the version of WordPress is pretty people never write so I'm trying to see if I can okay we're press you're just chilling apparently you guys work for HLN dude yeah sorry I threw it a little bit of it's very tired so first that then this is addicting holy crap I can see why you guys enjoyed doing this so much it's really fun when you add like 600 people watching you it decided that I cannot even do anything anymore because someone is just killing the connections through the side someone is dead for me it's dead I can't decide I'm doing okay so far laughs away laughs away boy what is this can I use find a freaking string I want to have one to work so my VP scan got back yeah the next time we should we do this if you have this many people which is split into two teams Oh that'd be cool I'll be fun like we could have 3v3 there's an optional need to switch box though PAP Xylo I need credentials ger okay now he's cruising but he's taking his time because there's an optional is cheating cheating I've gone through the whole book stop finish oh no stop finished like I found one way in I'm not sure of what the others are though at the moment [Music] yeah probably wants to go back to that tommcatt cuz WordPress is just not having fun with me I threw some generic Tomcat stuff like Tomcat logins out it and nothing came up oh wait what is have you guys looked at the port 9999 yeah I didn't see anything interest so random text on 999 is how what they use to track who has the current king value Oh Dan we're getting our asses out on this stream alright Khatib I see you man I see you how many flags are there in this room there are eight holy cow this 11 minutes in you got 6 flag I got zero can somebody get optionals IP I just for us just so we can let's pivot your parrot eh it was the hostname I did see that so yeah oh yeah I added into my etcetera hose so it will behave a little bit better I haven't really been using it though which was probably a stupid move it's a good idea to add it to HD hosts I might be desperate to do that at some point because I'm doing curl right now I'm not working up a wordpress scan is just joking I think all of us are trying to scan this hey yeah it doesn't do it mean generally [Music] [Music] I hate when Metasploit like auxilary scanner modules so like yeah we finished scanning and it has no output for you we to have someone like narrate this for us like someone just that's not playing go through all of our streams and call it out darks don't see on one of the try Hackney guys always does like shout casting for some of these like competitive tournaments which is unreal we should have them do it for us when we are streaming there try hacky boxes have them go live and look through all our screen wash backs oh yeah they did that just recently when you were playing huh yeah did it with the windows folks release which was an experience xml-rpc is that who's this I think all the same user but I'm not sure what to do with the user no I'm going for the tomcat now [Music] which port with a tomcat running oh man you guys have six flags where are these flags coming from I feel like once you get on the Box a lot of them yeah totally start to flow yeah if you can get on it's just a case of hunting through the directories for them oh no that's on Rockport alright let's see let's see if I can do this come on now I like after the game you got to give me some deets as to what the heck we can be doing here to get in icwp cron within WordPress that's kind of interesting XML RPC is in there can we abuse that cron grab a slow at the moment no [ __ ] I don't know why what could it be okay let's do that and I need to do that too here so how much is it are you suppose are you supposed to like brute force everything on this like the admin pages everything we start you stunned ideas much chef boot fasteners the way well I think what's up for some things you need to put for us one of the eases on the box was possible at one point that's free used by chance [Music] god damnit no it's dead we can reset the box if it's like really not behaving for us we should I think if alright cuz it the scans take a while and then it takes a second it return something I'm not even able to hit pay another th am right now like server site is even worse like an LS command just took three minutes to run oh geez yeah I thought someone's gotta be doing something fun on the box so I'm not on the box yet so yeah I'm not either no fresh right I'm working against the tomcat now um I'm just trying to refresh it nothing warehouses yeah could anyone flush it or just give it a while I think we just could anyone just now the bugs just back or reset site so that means a new IP address don't forget to change your the IP users now yeah going to Etsy host is my IP and ehm that should work right there we go a second a minute for it to load though can you guys hit the box uh no I guess I ought to hit the box no but see it's not coming back yet maybe it's still spinning up initiating yeah no I'm curious with this Shifu loves noodles references and that will HTML comment I [Music] mean I marvel so there are some parts password yes the name should be pretty obvious I guess I can't hit the panel at THM yet I don't I find it that wrong but it said my Etsy host why I thought he was in the flag but that one didn't work so so so that was uh what's the slash flag really just not valid no there's more to it I think yeah pandas are in the club no no what is that is check out part 1 3 3 7 I love that port 1 Li 3 3 7 yeah oh here we go oh it's an XML give me an excuse me in there we just did this one we literally just did this it's the exact same one it is [Laughter] just changing my IP right now from the request I had earlier and oh [ __ ] oh jeez oh no I need to stop bird no yes finally [Music] that's a free gift from me did you get a fry at least color execution right the Panda box before I would just kind of said no but okay we haven't a panda box either it's just this one the xxe one was literally in the last thing we're working on and it she passed where he's working beautifully but there's no flag in there why can't why can i what can I just get a flag duh can you read some SSH keys maybe I don't know what user it might be running as why isn't this getting caught in my oh that's why seven I don't know enumerate all it's 34 minutes left right seemingly know my purpose that where did you end up putting the payload in for this xxe attack in email you know okay yeah well I guess it's time for that book see [Music] but I give me directory for house for it kind of slap a whole thing you'll hear yeah okay let's look at users done you do a system and just a do they succeed in there I have a really dumb idea Chapel we're gonna try it out you got young oh you're the man thank you but I need so the slash flag was a rabbit hole was that it so I can't have one flag oh [Music] you need to hex to st and then base64 you can use the cyber chair huh that's how I did it I thought it was some thing for the jobs I appreciate it some kind of freaky thingy hmm [Music] somewhere in the chat says that uh is somebody intercepting traffic someone in chat says optionals intercepting oh they're [ __ ] with me because I keep hitting the wrong box like officer there's something the HOF six traffic in redirected to a fake like wait yeah like this if you hear any of the trolls left put in place you'll know about it the way he's just sitting waiting on us dude he's just plotting against that's at this point all right I'm just gonna come back North attic cuz I'm fumbling and flailing around how am I suddenly king I appreciate that whoever's just putting it in for me cuz That's not me I'm really thankful I don't know if this is gonna work but we're gonna try it Oh X&Y be seen can I just straight up and do it [Music] and usernames that had not met all use names like fun stuff how is this working or hold on I don't want to spend time with this I'm King I don't think I'm really close to King I don't think I'm remotely close to it at all all right let's explode a text throwing everyone's name in the King file that's so funny oh yeah I'm super here how did you decode this we're just getting controlled so if you go to cyber chef and you say from hex and then you go and - from basics before so that's it - it worked damn it cyber chef don't you know that that's on github never used it oh you was filming around I'm sharing the link in the discord cool and then you just pull that like from you pull it to the recite so it will end up like this and then good name of crunch ah what should we try on oh wait we never had a night into this damage damn I never out of him all right we saved him we saved him from all of us flailing around if you want to join us night I just added you to the chat sorry dude we uh we got too excited streams zips up hey there let's go John I'm alright brother how are you I'm just completely choking on caught on a live stream as usual what I like to do because I know people just type ls' and the terminal over and over again when they don't know what they're doing I just like run between windows I just hit alt tab over and over again you got a pretty nice terminal set up right now alright if this is over and a little bit if we're gonna do another one that's split up in teams because it's just brutal for I sent the two of you guys are just crushing it or one of them is anyone here the switch just a little bit easier cuz I am first not really sure what to do at this point you have two flags I have zero the decode thing I hate this yeah that was the first song is that it's a slash flag that txt it's a hexed and then base64 do you do that and I did all that just by googling a hex decoder and then throwing it into burp or base64 decode I'm a Python guy let me see if I can just give you that one-liner how do we spell his name I do that wrong I don't have patience for this Thanks I tried SS aging as a user in that comment this is loves noodles I chose the noodles as password they don't work I thought that was clever so that would be an easy way I thought about it so thanks for that thing the twist clever hey you never know that comment is there for a reason right this I don't want to think about it because that's foolish it sounds like a like a rabbit oh yeah just one maybe just user and not a password and there was this also still panda right yeah that's beautiful Yan thank you here's a horrendous Python one like perfect with our favorites been asking oh there it is finally what now I'm gonna ace its gonna say [ __ ] you oh sorry good I'm gonna see that's the same same reason why I cannot upload my videos to YouTube anymore because the cursing I wouldn't need to behave myself on my stream I think if you like past the first minute then you're good but I don't know really I shouldn't probably test that water it's amazing I'm down with one flag now thank you because he didn't support myself thank you but I am the king please make this the King level rude start now you're beating me it's amazing yeah hey ash Fox leave me to getting up there yeah Oh finally I got the password to WordPress no he already passed out user that's why I think somebody patched out the user was it WP scan that you use to grab that password because I've just been not having it so that's the idea that's the idea you get on the box and they protect it yeah yeah so yeah he's he's just chilling waiting for us to get in if there's another way to get in but I I mean yeah there's no [ __ ] thing as highly doubted though how was it the King for one minute how did I even make it to being the king for a minute I think some of the other players are just putting our name in the King file so that way we get some points on the board [Music] we're just here to hang here to have some fun hey buddy hey sneaking up there completely distract me nothing I was actually getting anything done anyway alright this I think option did you fix the Tomcat thing I assume already Tomcat when i-i've never exploited Tomcat so I wouldn't even know where to start good to know always I used to get in a still unpatched I am NOT patching anything for you guys what a sweetheart Froese don't get me wrong I've setting up throws but hopefully I can at least get a glimpse of that terminal parent for me don't know what you're on about yeah this guy owes filename and eau de pon da da TP I'm thinking do you see with that are you trolling me I see my village are trying to help me out Oh what where are you seeing that side of the Metasploit it is I will fire away at that we have a different our hosts [Music] it's so much fun when you were on a calling box Oh finally shallow oh you got a shell no shells I don't know what you're seeing here George I don't see what you're seeing on this bridge I have a Shifu this one right there is one of those ah yeah I love totally suck Wow that's not already past your password for that user that's gotta be Winx like me to have oh it does the do these random we like with a with the errors or anything so somebody played this before they would be fast as [ __ ] yeah that's kind of a predicament anyone knows what I can do with a bin parrot is that optional of leaving some remnants giving me pseudo access to bin parrot that's a cell phone there there we try at least I think the username that had the password on he's already gone for all the different that's we could've tried it with there's Metis way to have a ghost cat thing did I need to update that how much time do we have left has anyone exploit the Tomcat thing at all sorry to jump in no I see my chat kind of mentioning and screaming at me to do things but I'm just flailing around apparently yeah I think one of the things that I actually missed was the password is given to us in the source the Nautilus yeah HTM the password is there but I think optionals already taking care of that the password sources and it's a misdirect the initial one the new notice is one two three I know that that is a password I played set for you guys so what is I see the PO user in WordPress my WordPress can at least came back with that information yeah and you can find the password dead with Roc you txt for SSH for with all Pio or identify SSH directly actually we could throw some Hydra at it and then just break it even more one of the users on here I'm not sure how much detail you want on user accounts Hydra does come in hand at some point for one of them hmm how does this thing work let's try it out I'm owed an MIP I literally used a GP shooter in the ghost cat room I tried to do it so maybe if the ghost cat does do something that would be handy oh I need the actual somebody's point still time I'm not I'm currently at 145 points and I didn't submit any Python I love somebody great I'm just I'm you see your friendly co-host sitting here and washing your streams that's it actually what's gonna happen right now I have no tools I will have burp and I'm apparently running out of human tonics Oh life's unfair life is very unfair yeah I can't log in with the default on cadential that's the thing though we tried that already and didn't work unfortunately let me score bags thank you for the tier 1 sub I appreciate you might not supposed to be nice seeing you in here corvex around yeah he just joined awesome so John you're currently at 505 in 55 viewers watching you stream live on YouTube your plays are having a good time and as we see reigniting is currently shaving a little bit back while our friend superhero he's doing as good as you can on the target ash is probably a bit well information is coming through and maybe John should try to run some a GP shooter on the next target so I'm bad with a GP shooter I like him getting file read but I don't know how to turn this into like remote code execution I don't know if this worked I honestly don't know what I just did or if I can so we have 16 minutes left I think enough to do some immigration I don't think that even worked all right let me reach out to my chat brute-force Tomcat login or show got it I tried to proof first Tomcat it's still running yeah but I used admin as the username so maybe you should use Tomcat and you have Mona can we add more time to this machine no this game is normally only just a quick 45 minutes or an hour game could we launch it just we can find that or how optional got in we could if optional is totally cool with that optional if are you could you mind sharing your screen on discordant maybe I can just pull you up on the screen yeah show me dealer now or in a bit when it's finished it when everyone oh yeah we can reset this and then you try it I voted for reset so everyone's ready but I don't want anyone to stop because you know I'm still trying to figure things out - you know we have a little bit of time left I'm like absolutely scrambling wooden with no leverage on anything so you put the reset on what I voted for reset but three out of five have voted so far I can throw it in whenever you want up to you guys man just whenever we're ready I just want to kind of see how he got in and so it's just for you to understand how these boxes worked a little bit I can do that everyone's fine for it yeah yeah let's do it six out of five I love it optional can take the reigns option where is that you cannot stream in the DM cool that's uh horrendous I can discuss it like like you know I went to the screen you stream Nona Nona cool apparently what what I can do it I think if you have room right beside the mute right beside the camera button there's a turn on screen share I've got an on camera not screechy weird I got you I got a different way to do it hold on I'll send you a link right now give me a sec okay I'll just make it a Google Hangouts thing just trust me I'm gonna stick to link just click it okay it's good do you end up doing anything with tigress though so tigress I think is your 1 3 3 7 now we'll get to some quality content [Music] since doc is gone there we go yeah when you ready just joined out link I just sent and sure yeah so I'm just doing my reverse shell again your entire screen all right chat we're gonna see how optional did this okay so I see you showing up for everyone yes link here I could fire this up heyo [Music] back again there you go John I need to let me in meme oh yes weird that's weird I can't actually hear anything when I go into this um can you hear us right now I can hear you now when I go into it I can't hear a thing I think it's like some sort priority thing that goes on with hangouts I can present my screen and like kind of talk it through can you guys still hear me when I'm clicking on it then yes yes I know this means rising leap on microphone on present all right so roughly what obviously start with as he host you have just set loads a bit faster alright the first thing you want to start doing is Hydra so as a Hydra tack on Shiva okay absolutely it'll just be a default password it's like everybody mute Google Hangouts place then with the WordPress site you've got a brute force at one with WordPress again so what press URL um what's the syntax looks like you never remember it I hate the syntax for WordPress man accusers and password so stack you WP users yes this is my first ride right real Oh tonight w uses poem user okay I mean right right freaking with password from rock you as well eventually WP scam will go through and pull out there's quite a bit very forcing on the two main users there might be another way of getting to so you logged in and got your show through in WordPress that's what tech oh man did you are shallow through the WordPress this should run back with pander in just a second or I'm not handle that was Batman on SH and the xml-rpc a return password one I think it is yeah so you get WP one yeah that's the password one I could never get the WP admin page even load for me they actually houses got good at [ __ ] does it in here you can do a PHP system like yeah nice but just slap in a reversal be really dirty that's roughly a key ISM I cannot know yeah I did it into this will eventually return with Batman so if I were cool I do s stage paths just show this is so amazing I [ __ ] love this part the getting in Potter was saying I'm super like vulnerability base it was just brute force right someone changed the password on it yeah that's a bummer you know in a way right like WP scans gonna help us find it normally am Batman that would have been helpful if I still present another one was that a record everything come free yeah that was great okay sick she met another one normally this Shifu pass what is amber I assumed someone had changed that before M I went back in well I was fine I don't know what to say I wasn't even remotely close all these vulnerable boxes are different than the kind of stuff that we do edweb now I spent all the time you just read you through Java JavaScript files yeah [Laughter] running finally so you you can get route via FTP yes actually I think I see who has sudo FTP just found out sudo FTP and then what airdrop you into the FTP shell and it's exclamation point slash bin as a oh yeah that's where I am right now so I got rude oh really yeah let's try that can I like FTP to my local host why for some reason FTP server really so you log in as Shifu for FTP and then look I can't go through that is that how it works [Music] so mo dog cat he obviously has a script running that is putting his name into the King file I can't see anybody else will screen is a turn-on working on this though yeah I'm doing you're going to it okay I want to see if I see what are the ones we have on here really quick oh I know I need to use the stinking hostname it really helps to have a setup that has all the tools that you need that's absolutely do you guys want to do a random box again for sure let's do another one yeah the discrete bag do you got up going John on your what was that thermal no you dad you were running so good oh my terminal yeah yeah so I really like to use a terminator it may I make it an absolute mess which kind of sucks but uh you can like split your terminal windows horizontally and vertically vertically and it's good stuff so sorry to interrupt but I I'm King self-made jokes video option of watching John Hammond and I made it to the king that's really really cool so what bosses have you guys not done on this like have you done oh he's already I have not done hackers or fortune yet so if you want another raw experience of me choking for an hour optional have you done any of these I've done all of them at least so I've done the only ones like not really done his line in hackers hack is yeah I stick by hacks it's just brutal I did like anything I could even get a hold on it and I've done it like five times so let's do this because if you you to have done line both of you guys have done lion-o John and optional I I done lime once I think I hear some words find skiddy that fortune is a good web one yeah fortunes of good one let's do fortune let's do this how many of you are in here six but I'm gonna leave because it's getting late for me so I'm gonna open up one space no worries so have a good night everyone tonight I'm looking one man joining us to eat but sleep - Fox alright let's find the sixth and then we can do a 3v3 sure and we can just do but do you sketch a mother random person I'm not gonna be able to compete I don't have any tools well what we have we have 3v3 already we don't need the ashes gone we have three and three junior top three vs. bottom three on the list I don't know if a list is the same for everybody yeah yeah whatever alright john niden and me on one optional stoic and super here on one sure what that sounds nice alright let me create this off the screen this time yeah like don't let me do it again yeah John you're on time out for this one oh you lost your privileges there we go here's the thing for everybody if you guys want to watch mr. Langer to watch it spectate with me if you like and apparently we're gonna do a web one hopefully hopefully I get a little bit of traction hopefully I could you know get through one of these out of these dudes but these are fun though it's really really fun I want so much it with a lid man when it gets to like clutch time and you feel like you're actually in the running then it's insane yeah I'm going like I and get some stuff really the three minutes we have I mean like optional how do you usually maintain route and you have this super awesome commenter you can kick everyone out of SSH or something so the way I normally maintain route is pseudo might get quite so good like I just have a while loop that runs the echoes my name in there man yeah it's hard hardly there are some people now that have developed a kind of module essentially a rootkit that just constantly persists oh well my buddy has a has a little rootkit like a Holy Hand Grenade it'll always read at your username which is dirty so people actually compete in this is that what you guys are saying essentially yeah I mean look good you know just like an icepick can set up one and how the NEX cluesive you know room that goes up if I could play it really create a web one and see we can do a I would moderate a web wanna see who does know there's what that'd be fun [Music] asking to let him let us make one yes I finished writing I finished making a room that I would like to submit to try hack me so I'm a little excited on that I'm reading saying though I'd be very fun I think there upload functionality is like temporarily not working oh maybe it's actually moving now okay I think they've they've pushed a couple of fixes or awesome so I recorded the whole process of like developing the room and it's like a crappy three-hour like real-time real-life video but hopefully it'll be yeah that's of the Colonna work but it seems like it's worth it hopefully you guys can play see what you think absolutely hey someone on Twitter asked if there will be a CTFs time John no no CTF I don't do CTF I'm not I don't I don't do anything with caps with like I don't know what a capture the flag is 30 seconds I all right so what was the team's again hold on John and night ends right there he's out he's out we have our John and optional I cannot see up from here don't mind me I'm just in my own little bubble at the moment you have a second seconds buddy seven seconds for people in oh boy I could voice I'm in alright run no I think he had to peace out he message in the discord like hey work gets in the way or whatever I got a drop alright John we don't need him what's wrong let's do it dude hmm starting to classic and maps can start in the classic go Buster are you feeling lucky take a chance mmm that's interesting yeah I got you John how if you're gonna mess with that how's your luck that's all I'm gonna say Oh No Oh 65,000 chance Oh seriously roughly is it does it send a shell to you that's what I think it is why I tried reversing the code when I laughed like when I got on the system and I was like yeah I know Oh bro I wanna have land around it for a while ooh ha ha so just like a little girl script there's gotta be more to that's right I'm sure there is yeah it's cruel what is this what is my IP address oh geez some random ports on some random ports came up so far I don't really know what to expect though [Music] mmm role equals role 21 what the what they're a little dirty Wow won and repeatedly send shells to me maybe I have no idea though I see a slash video games on port 80 but I cannot I don't know what to do with that mmm no script no fun I should actually take a look at this stinking nothing that would work off official but we can try it there's a little FTP there yeah I try it but I kind of love it [Laughter] nothing is seemingly in video game picture they two runs thick hide or anything on that no I just kind of rent strings did you go for a sec HUD yeah I'm going be dirty these are even words I don't even understand what it is what is shocking him that's a tool for steganography that might be hiding something in the image but who would hide that in the website yeah be mean without two CTS man oh I see an affair it's a CTF mindset it's it's even right is that what you guys do kinda I think there's a lot of for them it's a lot of I already done this so many times that they expected now yeah a lot of it comes down to like muscle memory especially when you're doing a king of the hill bugs you kind of know it's gonna have some low-hanging fruit there's any one brute force for the FGP at all to see if anything we can login with I don't see anything else on here so I only found sir status and videogames with my check that NFS share it looks like they've got something hanging out T NFS oh god I always forget the syntax and there's another part I don't know what that does [Music] but John you just help me out here this is typical CDF right they that's this is the thing that when people go to Def Con and do CTFs this is what they do sort of maybe that's re so like I feel like there are different kinds of CTF right there's kind of the classic jeopardy style that's really there's a lot of it does anything specific yeah esoteric maybe cryptography types or who knows what it might actually be or maybe just nerd puzzles but this is kind of like a boot to route where you're trying to actually okay break into a machine and do something with it and take advantage of it those are a lot more realistic right yeah yeah so I found something that tells me back some Kretz dot txt but I don't know who I should comment oh cool so it's on part three three three three opt John John the Ripper shoot no no it's a sage - John right it's tendon repair did you say there was poured three two three three four threes yes yeah I see that too yes yes also a network file share but I don't know well connect with that actually so I found through that network file share they give you a SSA to private key if you crack it it'll give you hopefully access and it does okay cool so how do you connect to that file Jack show mount will tell you what it is and then you can use mount tacky I'm sorry mount TAC t NFS and the IP address : the actual amount that you need I'd like to follow but it's like sitting here use hearing guy any words that I have no what do they actually meet like we would have like a worlds collide video kind of thing because I know like we like bug bounty like you say it's kind of a different world than like this sort of CTF or boot to roof style thing right so yes another planet kinda but but it but I really there's so many things that are the same because it's there's some brute force involved there's different kind of stuff but this is yeah this is so cool because you guys are so competitive imagine that I would probably spend two weeks from this target like that that that's the thing that's a reality you know you take time you invest a lot of hours and if TP wouldn't be open like that that's not happening but it's very cool it's it's an ease and you were well for me I'm so impressed by yes what because I'm watching both streams at the same time and see what BAM is doing I'm shaking out what John is doing and supérieur I have no idea what you yeah I'm I'm trying to mount the network file share right now so I quickly go with that but super you've been playing this before - right do you start your or how do you get into this all right well I the beginning of the year I ID empty on Twitter at that's how I got into everything right it's just I'm I did try hack me excessively like for a month and you know yeah I'm just trying to prep for osep which yeah leads me to a lot of hack the boxes and stuff yeah but OSB you'll do that that that's fun it's the same thing I I haven't done it since the latest upgrade but you got 50 bucks to stay at home that or 75 or whatever it is UID binaries Oh Lin piece is rolling okay you got it C password John yeah so once I get on the Box I really like to use Lin peas or Lenina to kind of like automate my enumeration process oh you're already aux yeah so I'm telling you go check out that oh hi thanks Westar that's weird check out that NFS share yeah I'm dedicate to the web I mean we're on the same team so I was a guy's you already guarding I'm cool with it so awesome I got the optional optional for now so we don't want to go what he's already onto find yeah please please please work no give me that what that's weird I don't like this whatsoever don't do that [Music] do I have to just boo me out sounds like the despair of a dead show [Laughter] here's a matter of time before I found one of you juice in there defending it I kind of I I've got a sour taste in my mouth first I played against John my show just disappeared oh yeah that's true I was pretty dirty then one of my favorite tricks is catting dev you random to everyone else's PTY and it breaks like everything how do I get from Kairos to root man so what are my key file go into the home directory you have a whale of a time the show man hey what does the encoding off this that broke everything what you think coding off this thing man have you found in fun on the web yet no I'm still working at it and seeing what I can find I really want to get into the web even though these guys already on poets wrote a rot13 [ __ ] oh you like that though yeah I got it let me see if I can do some fun poem cat I mean suck we aren't the same team right we are miss sucking at it that's a big difference now that we do good early is watching all these dreams and forgetting about that oh yeah I have to participate [Laughter] oh yeah that's cool he's doing that he's doing bad and I'm like making sure that everybody's happy and shiny and yeah that's how it is that's how it is that's what you get we bring stuck to your team you'll get no hacking and all entertainment you got a funny good balance it's always yeah I used I used to be out and I realized that I like Andy and he's running late to check your DMS I saw that you sent me some love yeah that's way broke why whatever I was kind of bummed I'd be fun [Music] do I have an idea or say man or whatever I guess not yeah I haven't gone into this Web thing yeah hello who ever said howdy to me hmm I'm so stuck there the only thing I'm missing is you do if it's coming it's a shot at howdy oh now I know that's actually John's terminal little bit efficient went a long way there soon as you saw boom geeking out dude haven't even got it in yet I'm still trying to find their way into this one thing the flags on this box that aren't so difficult to find Oh fine finally I F shell what do you mean it's unrideable what everyone is because you stopped I appreciate that good do it anyway [Music] okay astac we should be good you should be good now thanks buddy so that too this is a Windows box I don't believe this is a a Windows box no this is a facility Knox box yeah okay huh hmm X orgs that's also interesting yeah yeah yeah yeah gotcha optional are you already just King am i just spinning my wheels over here no I'm sticky I'm sticking with my teammates sucks Kate oh gosh darn it my team man I don't think there's a sticker on any of this right I think this one stego in it I might be wrong though yeah I can't as how this Web thing works there is a roll parameter of some sort and index our PHP but I just can't figure out what that is which directory messing around with for ID so I got video games nothing in there and I looked at the index of PHP on you know the domain index okay um what word lists the cheese when you were buzzing the domain what do you mean for the parameters or for the files in general when you were just directory its Gannon oh I had a custom one that I had myself that I was using should I do a particular one i king of the hill I tend to stick with cyclists web discovery what content beg even hands to pick up a few bits so the surface interesting so the big ones big dot txt or that's the one yeah all right let's see if I can get in through this web really quick did I have a typo in that when I did that earlier do I hate myself that much it's what this fine son with big dick Steve what the heck hmm nothing so far let's see I'll have a few more files ahead okay I'm running Glidden enum which doesn't perfect too bad will that work please pretty please what are you doing okay good I'm going on I see what you've done that don't clobber me please I'm dedicated to finding a web born on this instead of on saying it's a web thing question is never mind I don't I shouldn't say those things a lot who is Kairos actually what am i doing I'm forcing to find maybe a possible filename or a folder name where I can get in somehow John did you add yourself as a user Shh don't tell anyone I mean like what's the chance that there is between all these Greek gods that there is a Greek art called genre oh there's no there's no Greek God called John what are you telling me I'm just looking at Etsy password that's why so Fortuna Kairos and harvests I think they are from everybody get in so far everyone's just saying that's it you get in I assume I do not know what everyone else is method might be but yeah I did the NFS way also yeah yeah there's someone might check that says there's a web phone here but I can't really understand what it is I want pone cut to work but he doesn't when I'm sad I get caught make a call give me a hint under web portions is you've done this because none of these brute-forcing czar that's a while loop right that don't do it it's too soon I cannot see it oh that's not it okay I think I need to do something else if you l1 a well one how much danger do you get it I love it in in Jones chat there was a comment that that just said that it's amazing I think you suck it back with me taking mad notes well he's never caught a flat breads or something that that is the truth though I'm having sour beer Organic sour beer and I'm just chillin this is perfect you guys had good good hacking there's anyone messing with my shell most likely a Johnny's doing something weird on his neck I'm sad because optional nerfed my chatter and I should have done a better job of hiding I should have probably made a copy of made it obscure did you get a nice spamming yatama no for a second yeah I mean is am i still okay I don't even know [Music] I should probably make a few more of those just to have some hands who else is on here I'll spam some people I think I got hit by okay cool hologram showing some bushes I'm almost getting something like the wet part but I still can't figure it out what are you trying where are you at so underscore Stiles slash question mark mark as a valid parameter someone just for I mean give me a hand for I wouldn't say spoiled but and to give you a hand that's his luck on the screen answers luck is a parameter for everything we said luck is it goes with luck nothing happens ah got it okay I got I got our see finally nice that's awesome [ __ ] goddamn already get it alright it's just one more time crap crap crap crap the sound of panic kicking in why is this shell gone what's going on yeah it's it's it's bad I'm pretty sure you like hard push me out didn't you damn it [Laughter] no second where you said that bin I found it during the discovery I'm like underscore Stiles this is not what are we doing I'm unfortunate right we can't do ID or anything right yeah so Ellis works but nothing else works oh it only work every few times that's what you render got it it's like sorry show straight up a thing oh it's straight up is so I've dubbed up okay now make sense man I cannot get from timers to only Brandon's dance really randoms there we go got it got it got it okay that makes sense should we do reverse you option does Street yeah I just touch base right now just can't we get a reverse shot from this it should be able to connect you box is it animal style sure working on at the moment yeah uh yeah you should be able to get a callback on that I'm just wondering if there cuz someone said that and I ignores a few things I'm gonna try it and see where it goes my 106 233 one of us x2 [Music] hmm I can't get this shot to work [Music] okay so we can't curled our box okay just we couldn't get this shelter work no no dick yeah that's show another one this - uh maybe okay let's try another one so John why didn't you put your hash in the Etsy pass before it's a dirty trick to get a user in with your own password that way with even without like clobbering etcetra shadow you can kind of get a user and a password in yeah yeah I should probably be like doing things that would help the game but how are you jerks wait Oh what is that crunch oh come on don't kick me out don't you dare kick me out yet so John how did you ask elate actually or how did you change your user the previs that I found if you look for sent UID binaries you do have I did xrs find ya find is a good one X orgs will bring you straight there so X orgs is the spot that I used to get straight to root so I tried find before and somehow I mean it asked me for the password of harmless hmm so that is why I didn't know what to do what else limpy's is what we need from what I remember oh come on I hate this style and down you literally sent the whole thing already why are you not done thank you will that work maybe although I'm gonna do this just I don't know superhero did you assault did you get the extraction from Locke or did you is not do that I think they're all want to see huh yeah exactly I was just dedicated cuz you know someone said web and I really wanted done able you know I'm there as well right that's the thing that I knew but I mean since I had I'm gonna win no sparks I can't use host my own [ __ ] here anyway so yeah you can just do go to that URL styles luck and then every fourth time to give it a command is when it works yeah I read they index dot PHP so I'm sorry yeah yeah you can you can do a Python reverse show you should give you access yeah I use pen test monkey they give you a Python script you throw it out at four times until you get a show back unless these guys just blocked me completely No well some someone put a nice reverse shell in that front half right where the heck are the flags man a total Flags black and then not named flag I know hey jerks let's get dirty yeah I'm also trying something else no [ __ ] all right you're getting access to one of these users yeah I'm assuming you guys already have root I'm a little bit behind yes yikes I have freaking strings with us so so Jon 4x parks it also asked me for a password for Harlan are you trying to sudo it yeah not sure if I understand why that matters what I look like that's not because otherwise I still I still am permis right no because it's set UID you can totally force it to get your privileges regardless set UID will mean that you will retain the privileges of the user that owns that file holy cow if I could only type but do I have just to run it or what have you heard of gtfo mins before because you can totally use that yeah yeah I did that I did that oh jeez I hate not having an actual shell here let's do this what some flags are flags some flags are games CD I'm in peas from 8080 it's not sh does our work nope all right all of you are useless except for maybe that one who knows no that's just a regular thing you all stink I [Music] don't want to talk about a chat nobody wants to talk about it totally ignoring that someone shut down the SSH so no SSH should still be running it depends on what you are you trying to get we're at this age no Hermus pass did you guys patch look he just gave me the [ __ ] middle finger dude what a good bet you can't see what code is oh damn he just gave me the [ __ ] middle finger but that's to ask him been ASCII okay I'm not having a lot of good luck here finding some flag ease you're doing great yawn though you're seeing you switch between the windows so stress oh I got out pain I'm like frantic I hate watching myself and I mean people tell me in videos like dude you need to chill out and slow down [Laughter] [Music] what does that mean flag tips only the tip fighters my shop just do sound right that's okay I don't know what the heck happened to the King file I'll be honest it seems to be being weird it seems the king is in there how high no no I wouldn't file it again I see where this goes how're you getting back in [Music] you're not gonna keep me out dude come on for this I so it's been good for you on the files anyway did you guys end up doing anything with those like the Stig life I can't cancel this then optional ways how could you do this to me did you - L Johnny show how many pts do you have a decent amount question is did I get that right in time I feel like I did I'm pleased who I live to die another day like when piece was a bad idea on this now know it's a good idea should help you to find something I'm just more mostly what about losing my access and anything else come on just follow reverse here for you or - yeah I'm just gonna give you my IP you can just drop me a show it's helping me dude thanks a lot no way it's impossible to keep up how many sessions you've got open at the moment John old I mean this is the dirty thing with having all of uh you know I could just imagine the the sheer amount of time yeah it looks horrendous all right now I don't know why people even watch these videos honestly reboot the machine if I can't have actually oh that it's nothing I literally clicked on it for half a second I'm like nope yeah definitely no I don't even know how people can handle watching these videos where your stinking Flags guys have you guys not gone away what the fudge oh damn you guys got everyone's got a flex Toby got two flags Wow yeah sighs you get from your rule Oh am i where are the two flags on here I thought though you have to get root for the flags no you have to get shell for the flags yeah violence any flags in the directors I searched for a [ __ ] did you search for some flags no I went straight to get a to try to get a root but thinking we'll get it in for the flags try to search for it it's in there come on finish this [Music] and we have 17 minutes how did you find three flags optionally I wish I knew I wish I knew like every time I think I found a new flag I'm just hitting my head and looks like it's the same one as before I wish I could cancel that's things I could get those flags out these forces all over did anyone figure out what this lucky shell is so lucky shell is a fun little binary that has a 1 in life I want to say 25 chance of giving you a root shell but it also has quite a high chance of terminating your shell oh yeah that's what I got I got that unlucky there's another shell don't do it it's like whack-a-mole yeah hey someone kills my I secured the where are these [ __ ] flags nothing like nuking your in terminal oh if I could just find a flag dude I can't even find it the first two flags just your flag like this see the games I'm not doing this right is it a joke should work maybe nope now I realize I had a feeling I assumed you using one of those I myself favor towards base64 dude where the hell it is freaking act [Music] look where did you get the first flag from then - I sent you a command I look for any flag do this oh it's an user I have a user game flag that's an actual flag got it she'll check that this another yeah I did a fine name for a flag and get local games flag yeah I just added the user so it doesn't take so long that's one okay so I got my first flag finally dudwani to be honest bin I mean sitting here smiling do you think do you and bring what you think with me not having my any kind of box here with a web browser browser found the flags no no of course somebody just sneak them to me that's how is everybody I was king last time because turkeys king impactive [ __ ] but can smile a lot I'm only here for this selfies everyone in here no hey guys just anyone know a command that can actually look for files that have 32 characters in them yeah yeah if you answer told me probably has a tool for it Tom Tom wrote something in bash that'll be able to track it over yeah because that is how now we can't I'll do it what yeah I'm trying to see what a second flag is that you guys got wait a second can I do this I tried [Music] other characters II danced to what alright let's see if I can I've won 11 minutes to see if I can get rude on this thing oh thank you you can change the past though you know someone killed my show there are some combinations of optional in John Hammond being put into that King file that I'm already sure could happening constantly there's my ex args command how do we get this oh I feel like these are gonna be wrong but no it's time use the counting ten minutes left don't you kill my thing I wanna die [Music] what the fudge okay let's not do that oh it's cuz of the stinking No [Laughter] [Music] thanks for the follow Skylar well that just gives me an actual shell rather than a baby show it will thank you I need my I don't know if that will work or not and it sketches me out yeah I hate this Wagga mall as soon as I see eggs eggs I'm like if only I could do something [Laughter] [Music] [Music] and now I I now I understand what I found in the very beginning on this pot four times three now I found how you kind of use this oh cool yeah so it's a base 64 encoded zip file and it's a password-protected zip file oh so I'm trying to see how I use John like zip to sha to John or something like that so I tell you I thought of you share with ex ours nothing at work I thought doing sudo SH and then calling which X args and do it that doesn't work yeah but you gotta understand that as soon as the XR x comes up I'm gonna kick you out yeah I'm just trying to see if I can get a I really want to stink in more to another flag I'm waiting for my chat to just feed me flag I think I killed my char like John is just flailing around it I'm not worried did that just nerf that shell oh yeah it definitely did okay cool I can't hide why hey I got the password for another user nice is it I can set it to something what I said okay of course it will be the first one getting it since we are team did you user just try that [Music] and I try it for SSH I'm trying that strictly right no see what else can I try and the last final minute to see if I can at least get she'll lift five minutes left yeah it works it works stuck cool bring it right now finally where'd you get root worth because I Cameron spinner tty show it says yeah so I can SSH into a user and I have another I have Pico now that will give me sudo I doubt it you guys get a TTY at all or did you guys kill it off for everybody else because every time I try it says I can't do anything because no TTY is present how are you spawning or how are you getting the shell that you're using as I go through lucky Oh hmm lucky should just put you straight up to work luckily put me dump dump dump that oh I've root finally so okay I think I know why that is I can't do any TT wise I know maybe you guys killed it off I'm not sure I don't if you guys can't you be honest but I've tried pearl I've tried Python I could do it that before oh wait I know you this bent up okay we're good for now but you know every time I try to do a suitor that's why [ __ ] I haven't been able to get a shine it that was insane super oh yeah thanks man [Music] what else can we try to do the goodness gracious I just need to force that one more time I said it feels like I'm in danger [Laughter] hey come on if I get it once yeah I can't do it I can't do some wall no no sorry I have to try that only for my best friend mm may see though where these other flags that man one minute 38 seconds oh crap [Music] all right I didn't get that show I need it to my machine just expired I think two for the box that I had it's gonna be extremely fun to hear optional to tell us about where the flags were oh yeah that's right I I really wish I knew at this point I'm literally just slamming my head praying that I get a hit on a grep for an md5 or I stumble into a directory with a random game name some flex I flex some flex our games okay I think this full flags named flag and then there's four named after games but at the same time I think that might be a stagger but I don't have a clear how'd you guys get root are you in the show yeah and superhero can show you this really nice resist randomness work even better he even created a user account for me down stick so what happened the game end yeah I suddenly just bobbed off oh man I was about to just fire my script to get through King oh boy well I feel a little bit better content wise yeah yeah this was a lot of fun well jeez thanks for doing this guys I gotta step my game up with the route shofars cuz I just started to figure out how to do these cuz you know I don't really have a job with bug bounties so I think the next time we do this between now and next week and when I pop a few boxes hopefully so I can carry myself next time we're out yeah I was a joke I'm ashamed to be honest like I meet I need to install a boot on my [ __ ] machine or at least get some kind of shell box here yeah I mean they think it's like for me personally it shows how much I still don't know if I'm being honest there's a much and I don't know so yeah I'm going on the osep path with try hack me anyways that's how it goes well thank you guys for doing this I know it was like a weird sort of out of your element thing because I know bug bounty and this are kind of different animals but both of them I think are awesome and tons of fun I had a blast personally man not I'm completely okay with not knowing stuff on my streams so I guess I'm excited to want to do this osep path on try hack me cool that's awesome yeah it gives me a reason to want to do this I can keep up with you guys now I see why I got to go down there with CP path if at any point you need any help with anything just give me a shout of you might be more than happy to clarify anything for you I'll be happy to you should do more of these I've been so spoken I've been doing this every week thing I did one with Heath last week if you want to jump on at any point option I would love to have you do one together even if it's a minor percent if you have me I'll be down yeah for sure I think it's good I have to call it a day for me at least I don't if you guys are going to keep streaming to Europe you are thank you John thanks for proposing this to put this together I think we're doing another one next week me and you at least yes please if you're talking we can hopefully we can grab a cyber mentor and get some other cool friends in here I think this would be a blast we'll make that happen I'm gonna go canoeing next week so I'm not gonna be around but you guys gonna smash it anyway we'll be ready the next week following well if I'm invited stuck I will try to keep it up for us superhero we'll all do a group chat in this group he's to it and then we'll just make up make plans and if everyone wants to join and do it we can all do it as a group I don't think having QP people involve is a bad idea in my opinion I agree we can't have too many people alright that's it thanks Johnson thank you everyone yeah awesome a know you all all right I want to leave that a discord call and now just hang with all of you beautiful people holy cow thank you so much for coming to hang out and come into play this was a new thing for me because obviously I never kind of i've never streamed with ben nom sec or stalked before and it was just fantastic being able to hang out with them i was like a little bit of nerves like i was nervous to just be hanging with them you know being in their presence it's like a fanboy thing and also really really excited so for the first game when it was like boy absolutely gonna I just completely choked didn't get initial access didn't get anything was scrambling going like what do I actually what rabbit hole should I fall down it was kind of fun to do the next game fortune because that was new I hadn't seen that one before but I at least had some notion of getting access so then I was able to climb in in play so I'm glad okay provide some content and still a little bit more fumbling and rolling around with windows and cramming things but that was an absolute blast and I'm really thankful for you guys all come into play doing these streams doing a cod live stream somehow manages to bring 400 500 of you guys all at once and it just blows my mind it is absolutely surreal to me so thank you so much for watching thank you so much for all of your support hopefully we can do more of these you heard us talking about maybe do this again next week with this hyper mentor that would be super duper cool we can get some more I don't know like superstars in here and open the game up for the community for you and so you can play and I'll share the invite link in the chat or accidentally leak it again and that would be great so what else am I thinking I was thinking of nam khan you saw a little bit of hype for that hopefully at the beginning that's going to be June 13th or June 13th according to noms tweet Ben's tweet but hey I'll be hosting the capture flag for that again it'll be all new challenges I know verse at Khan was seemingly well-received when I hosted that and that had about 50 challenge and play 50 challenges in play and I'll be doing that again hopefully with about 50 new challenges for nam khan and I'm grateful to become an official host so appreciate all that love an old support for that so hopefully that'll be a really good time but stuff that's on your radar more triac me coming out more a CI CTF I want to do a little bit more like pone tools tutorials or bash tutorials or some rap emporium stuff or some hardware hack to box because I know I know a few people been saying like hey this try Agni content is awesome the all army cyber stinks content is awesome but we'd love to see like can you do some window stuff or can you do some assembly stuff can you do something new like yeah man I'll see what I can do I'll try for it we'll give it a go but a lot is on the way so thank you so much everybody thank you for tuning in thank you for your support thank you for the chat donations and everything I'm gonna call it because I've been doing this for a long time but so so grateful for you guys tuning in and listening Oh

Channel: John Hammond

Views: 56,910

Keywords:

Id: cQOKhA0LHB4

Length: 140min 45sec (8445 seconds)

Published: Sat May 16 2020