Hacked and Backdoored this website in MINUTES! NEVER try this on unauthorized targets!

#pentesting #ctf #hacking #cybersecurity

DISCLAIMER: The techniques shown here should strictly be used on targets you HAVE permission to test. NEVER hack something you don't have permission to.

In this video, I demonstrate how I hacked a CTF target, got root, and backdoored it in just minutes. You will learn many hacking techniques along the way! Challenge from @indishell1046

🚀 🔥 Become a pentester

📙 Learn the technical skills:

[adeelahmed]

As a web developer this felt like a horror movie. Would love to see a video hacking a PHP Laravel website. Subscribed

[cken]

First time seeing hacking attempts like this. Amazing content!

[Licardo]

Came for the back door, stayed for the plot

[sooivervloessem]

This is insane! As a second year Cybersecurity student, my mind is blown by the way of thinking. I often find it hard to not have a tunnel vision when searching for exploits. I'm really wondering, how did you learn all this stuff?

[steelko]

Learned a whole lot just by watching the video. Currently a second-year cybersecurity student, this is very helpful. Thank you!

[traumaloop]

i really understand maybe 5% of what's being said but i can certainly tell that that website got completely folded

[deedikjepijn]

This is crazy, thanks for the reminder to care about security before its too late

[joelamoako]

Wow this is insane, i'm a devops engineer and i have learnt a lot from you man, you got a subscriber!

[AbDevSec]

I was just about to switch from web developpement to cyber security cause I felt I had learned a lot from web developpement, and I've always loved hacking and backdooring. I found this video and your way of explaining stuff is so good and creative I've learned a lot from one video. guess I'm watching all of them now!

[neenus]

Watching you go through the process was a rollercoaster I was so into the video when you were able to ssh I shouted YESSSS!!! I love what you do man it's awesome

[notsparktion]

Wow... This is so cool! I've been thinking about entering the Cyber Security field for a while! As a student, this is really intriging to me! Thank you!

[rogo]

Instead of rm access.log files I think it's better to copy everything before your activity in another file and then rewrite original with that copy. Or just truncate it to zero if you don't care too much.

[MrRaja]

Finally YouTube is recommending me some quality and useful content

[Emmanuel-isgm]

great walkthrough video, very informational.

[furti]

The One Piece images caught my attention but didn't expect to be this interested in the video! Great one

[NaughtyKlaus]

I am curious; did you use a website you own, or just a random site you found? I find this video quite interesting, and it's amazing how easy it was for you.

[LogJake]

You could also create a .htaccess file that interprets txt as php then you could upload a php shell.

[tacokoneko]

This Is very awesome but I do think the CTF containing a setuid binary that popens scp is incredibly unrealistically insecure but we can see that it is just placed there to provide an easy privilege escalation after you do the actually realistic part which is the remote code execution exploit

[Kaughts]

Its amazing how good he is at walking through this, I wish to be able to do this someday

[deedikjepijn]

As a person that has his own homelab/server etc this was a crazy horror movie. I should really create more warning (and defense) systems.