SQLi, SSTI & Docker Escapes / Mounted Folders - HackTheBox University CTF 'GoodGame'

[znation]

John: *Literally shows the first docker escape I've ever seen*
Also John: "Wow I'm a dumbo"

[Logan_]

yo btw Thought I would just say, I recently found your channel and with every video I watch I learn something new, interesting, or another way of doing something I never even thought of! I love your content and I am pretty sure I will be a consistent viewer from now on. Keep up the great work John! :D

[relix]

Even though I can understand each step taken individually I wouldn't be able to string them together with my current skillset, but I did find solace in the fact that I had previously ran into and solved the bash -p hick-up. (*Insert Leonardo pointing meme here* The bash -p issue I ran across previously!)

[zacharycook]

just wow man.. watching you do this is so satisfying. So inspiring. WE. WANT.

[sannyboi]

Awesome video. Love your energy, your passion comes through and it’s contagious.

[neiltropolis]

Love watching you work John! Thank you.

[DHIRAL]

32:43 You can use SH instead. It won't require any other libraries and would work with SUID!

[comradedad]

You are a master at your craft. Awesome video.

[debarghyamaitra]

man the privesc was insane!! I didn't know that technique.
Thanks John,

[HundleBundle]

"We're root supposedly....but we're supposed to be user. Did we skip that?!" John out here too good for these level 1 boxes haha

[chillytheprogrammer]

I can’t believe how it only has one star of difficulty. I could never get that far

[rwlf]

that was a cool privesc. learn't alot from this video. thanks!

[RAPERSWG]

mounted file systems are dangerous, that was fun to watch!

[Makh]

Great video. I understood everything except some of the subprocess ssti. What does setting stdout to -1 do? Cant seem to find documentation on that

[TurtlesWrath]

4:30 "People are all excited about Battlefield"

That didn't age well...

[squky]

Did you remove the ransomware stream? I was hoping to go finish it later. 😢

[epicmotivevideo]

Easy? How on earth .... I'd never get this as a noob. So much to learn ...

[roguishowl]

Just started CTF and i love the challenges, my work is mind numbing, so these challenges are a great way to spend the remained of my work day.

[Donder]

Dude this is insane man, never though it would be this

[HAGSLAB]

I've been watching all your recent content and it's great as well, but I must say, after watching this video, that I really miss these CTF box videos 😊 Just my personal opinion though, make the content you feel like making at all times, it makes it better that way.