JSON - In Depth Video Explanation

Tutorials Video Tutorials
1

This is my first video on any of the HTB machines and I’m going to make more for all of the other boxes I’ve completed, so really keen to hear any feedback you guys have.

In this one I’m getting the user flag on the JSON box that was just retired (the root flag video will be up later today) but rather than just show what I did, I decided to explain the ysoserial exploit in a lot of detail. I figure that’s a lot more useful for most people that are watching walkthroughs.

So yeah let me know your feedback, good or bad :slight_smile:

3

great!

4

That is great that you explained how deserialization works. It will definitely help those without (or with small) web development background, including me :smile:
I think people appreciate vidoes that shows whats going on in depth, rather than just rushing for the root.
Thanks for your work

5

Thanks for the positive feedback so far guys. Keep it coming (feel free to suggest things that could be improved for future videos)

6

The root part (three methods to get root) is now up:

7

@VbScrub said:

This is my first video on any of the HTB machines and I’m going to make more for all of the other boxes I’ve completed, so really keen to hear any feedback you guys have.

This is great - nice work.

8

@TazWake said:
This is great - nice work.

Cheers :slight_smile:

9

good job man!,

I did two ways in kali, in the last method, I use ssh and wine :smiley:

10

Type your comment> @Str0ng3erG3ek said:

good job man!,

I did two ways in kali, in the last method, I use ssh and wine :smiley:

Thanks! and yeah there’s plenty of other ways to do the port forwarding, but I fancied writing my own tool for it and it was a good learning experience :slight_smile: