#pentesting #ctf #hacking #metasploit #kalilinux #ssrf
Part 1: • H.A.C.K.E.R ALWAYS finds a way! - Gemini P...
Part 2: • How to Hunt for Bugs - Gemini Pentest v2 Ep2
Part 3: • Trust your Gut Instinct - Gemini Pentest v...
Part 4: • Will RCE in cookie give SSH access? - Gemi...
Part 5: • Get a reverse shell with ngrok and netcat ...
Part 6: • Redis privilege escalation Part 1 - Gemini...
Part 7: • Redis privilege escalation Part 2 - Gemini...
Hey what’s up? In this video series, I will h4ck the Gemini Pentest v2 CTF challenge. This episode will be dedicated to performing port scanning with nmap, then performing a directory bruteforce to find a registration feature. then creating a new user account that has to be activated. Then, I will bypass the activation feature, login, and explore the application features to hunt for bugs. We will then follow our gut instinct to turn a potential vulnerability into a promising lead. Then we will try to access the server using SSH by uploading our public key to the authorized_keys file. Since we can't achieve that, we will get a revere shell using ngrok and netcat.
🚀 🔥 Become a pentester
https://academy.thehackerish.com/p/fr...
📙 Learn the technical skills:
https://thehackerish.com/best-hacking...
📙 Become a successful bug bounty hunter: https://thehackerish.com/a-bug-bounty...
🆓 Download your FREE Web hacking LAB and starting hacking NOW: https://thehackerish.com/owasp-top-10...
🌐 Read more on the blog: https://thehackerish.com
💪🏻 Support this work: https://thehackerish.com/how-to-support
Facebook Page: / thehackerish
Follow us on Twitter: / thehackerish
Listen on Anchor: https://anchor.fm/thehackerish
Listen on Spotify: https://open.spotify.com/show/4Ht8jEb...
Listen on Google Podcasts: https://podcasts.google.com/?feed=aHR...