[HINDI] TryHackMe HackPark | Service Abuse | Directory Traversal RCE | CTF Walkthrough #27

Hello everyone. As there are not many Hindi videos explaining CTF Walkthroughs on YouTube, these videos might be a help for you. They are fun and interesting to do, and you learn a lot from every challenge.

Here I am solving a medium challenge from TryHackMe, HackPark. This is a starter box for Windows Machines which involves enumerating a web application and brute forcing a login page. Then we exploit an open source blogging platform manually through directory traversal and gain initial access to the box. We enumerate manually to find privilege escalation vectors and ultimately gain administrator through weak file permissions and service abuse.
This is a CTF style, so not really a real world simulation. We will go slowly from the beginning and gradually increase the difficulty level. LET'S GET STARTED!!

============================================================
============================================================

Download my OFFICIAL APP to learn ethical Hacking:

My Laptop Recommendations:

My Gear:

============================================================================================================================================================================================================

If you want to learn Ethical Hacking in Hindi, I have made a course:
Total Enrolled: 1500+

Total Enrolled: 1700+

Total Enrolled: 650+

Total Enrolled: 290+

If you want to learn Red Teaming on Active Directory in Hindi, I have made a course:
Total Enrolled: 50+

If you want to learn create your own tools for hacking, I have made a course:
Pentesting with Python | Hands on Scripting for Offensive Automation:
Total Enrolled: 200+

If you want to learn Python programming in Hindi, I have made a course on Udemy:
Python for Beginners | Learn Python Programming in Hindi:
Total Enrolled: 20000+

If you want to learn command line and shell scripting in Linux, I have made a course:
Bash for Beginners | Learn Shell Scripting for Automation:
Total Enrolled: 500+

---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

If you liked my video, please don't forget to press the like button and SUBSCRIBE to my youtube channel. I will be posting videos on cyber security, ethical hacking and technology. Also some interesting tricks and techniques very soon so stay tuned and thanks for watching....:-)

[aniketd.]

That's lovely man! I just wrote it's writeup on medium couple days back and here you are too with the video tutorial! That's a wonderful coincidence! Great Job Dear!❤

[LokeshPandeya]

now next ctf brother
this was awesome

[Ajay_alpine]

Moustache mein bohat bariya lag raha hein apko..❤

[codez_official_]

Thank you sirr please make more videos like this❤❤

[udusama]

Please solve more THM labs sir ❤️ Love from Pakistan 🇵🇰

[arofficial]

I am a novice in cybersecurity or even programming.
But I do want you to make a well researched video on recent data breach from ICMR website and servers.
Please make a video for an enthusiastic audience (not for uninterested ones) who are curious to know-hows of Cybersecurity.
I really want to know how NIC works, whats the pay grade, which comapnies they hire, how do they function, which ones were responsible for auditing ICMR's websites, where the fault could have occured etc.
I just read an article about 6000 attacks on ICMR website in 2022, the agencies claimed that attacks were unsuccessful, but now I doubt it. They also claimed that the IP was from Hong kong, but someone just could have used a vpn.
Please a half hour or an hour long video on this topic, and I ensure people will be curious to know.

[naeem]

Great sir, i learn alots of new things ❤

[abul]

Brother is it possible for me to be a web developer and a ethical hacker at the same time?
Please reply please.

[WHOAMI-wnlx]

Sir pentesting k liye koi achi book suggest kriye na aap

[SHYKING]

Ky app gpn administration log in kr sakte jo

[gryphon]

What rooms do you suggest for winners??I completed around 40 basics/fundamentals rooms...Can you suggest some?Also can we see your profile of THM

[btr_gamerbrawlstarsbyrishi]

Lets vote for bitten bhaiya's beard

[rajeshbairi]

Please some suggest important book in this field

[MohammedHassain]

Bhaiya how many bounties have you made from hunting bugs?

[CypherX-Sec]

Bhaiya apne IP galat dala tha python wale me

[crazyarmy]

bhai i have completed my ceh course but i deet get tell now any job..😢

[WHOAMI-wnlx]

sir aap ye hedphone konsa use kr rahe ho can you send me this hadphone link

[crispy]

sir mobile app security mein kuchh lao

[kamalnawal]

i am BCA second year student and now start hacking. kiya ye time sahi hai ?

[SayonRana-fquw]

Plaease tech me how to hack with termux