OK, what's going on in this room will be doing the Arctic box from the box.
This is Ben, Ben, Ben and I hope in this box a few weeks ago and I recorded the video in the last
week, but at the time I got one problem and I was sure what the problem is and how I read and my skin.
So we can see the A puts up one to two five eight four zero zero and four nine one five four.
So at first I did not know what to search because I don't know at this point.
But even then, Mobb cannot find.
That's why I put this question mark.
So I have to look for this aid for report.
And it told me that generally it's been a bit of cold fusion and mix up.
So it's a a cold fusion with these, uh, similar to, uh, this, uh, website hosting service.
So it's similar to a passive server.
Uh, this is a cold fusion server by Adobe.
No, let's go into the.
So this is the browser.
You can see this is the index page.
And if you to see if the equal dimensionality and the red box.
So that does not do anything.
The website takes at least 20 to 30 seconds to process the cost.
So I will show you why it takes so fast.
I don't know how to spend this because I never did one.
Then I Googled, uh, for this, uh, hope and confusion.
So I came up on this website.
So you can I put these links in the description and you can just search for cold fusion and.
So then, see, this is the, uh, British and here.
Let's go back.
This is what we want.
So if you go to this website and it's about egg and confusion, hacking, so did they, uh, showed
a vulnerability that it will expose the password hashes when you will be this this financial confusion
library and then password poverties pathology, digital and so personal digital and needs to truncate
the remaining order?
No, let me just say dot com and put this in one eight three zero zero.
So.
So this is the landing page already had been has been put there, so we need to find the parcel.
I think we've entered the cartoon or we can go with this one.
Well, before this.
So now let me push this here, that extra forward slash.
So let's see which one gets first.
So how long been that this enormous window in the window, I did not run, so nobody should get the
password hash.
And can the past couple this?
And Global Krag Station lorgnette.
And both the Hachiro.
And on crashes and you can see the person is happy to know you can just type happy day
and another, uh, you can see me type the happy day, but it has been changed into this long because
it is being converted to hash by the diverse group.
So within this website, they have posted the password.
You can call this one and you can, uh, inspect this one and you can pick this, uh, uh, download
the software and the password and need to perform this Peachment function.
And then you put it on the actual you so captured the random request and post the password there and
then, uh.
But the problem is, uh, this, uh, website takes some time, like 20 to 30 seconds in the time where
you decide where it gets changed.
So that so even though you have to start running after twenty seconds, decided to become the me start
with.
So that's why you need the password to generate the.
Oh I it's like a legit drug.
So now global council.
I don't know why this quarter, so you can try this getting the hash hex value, so after logging in,
all you need to do is go mappings.
So what we need to apply, shall we create a new word asks?
So global mappings, so we need to understand where appropriate and and which, uh, this not reflect.
OK, I we'll show you.
So I will show you what to approach.
So let's look at Chelse.
Group Sea of Socialism is called a markup language, you cannot create a Russian, uh, because, uh,
it does not have a socket functionality so that it is chief executive.
So it's generally normal.
Uh, Absher, you need to enter the commands it will execute for you so you can see the logical parts
of it has been made up of this physical part sequence made up.
So that's going to be putting a nagging contributors.
You can also create a new mapping if you want.
So this Web site is taking forever.
But they know he helped create the Shingletown scare, I have already created one.
So I'm going to show you how this looks, because the cities are lagging, so you need to have the task
task name and you need to bring order here and hope to see if that scene from here and it will download
the file and you need to disable it.
So this file will be sealed into this better secured route.
See if I see you fighting this here.
Fighting here.
So I've got to click on this, so watch this, so come on this task.
So there you go.
But this year for the these year, you know, you need to put the CMB here and see me come on this mission.
So it's always better to try to ping your mission.
So this is the Superdome, I'm using a from the 10th and 11th and ICMP, so the Bingu, this ICMP.
So by default, this is a Windows box you can see in windows by default takes for packets.
So let's explore this one, if this is successful, we see the package here from 10, 10 to 11 to our
current Xbox.
A response for an hour from.
So again, it's worth again.
So you can submit.
I don't know whether it's turning a response.
I think we got wrong with the PNG government.
OK, so that's the thing I missed with the ping comment.
So now let's bring this.
So we are resiling.
But this one.
So you can see there are four packets, so that means these commands execute correctly noted a system
and for unfortunately for us, we cannot run the system in full because they'll probably not be shown
here.
So what you can do is you can put this on Potosí Slash.
Cold fusion, the
and in the troop this year, for the year for the CFO detail puberty.
So they should do fine.
So the system should be, uh, into this and it should reflect here.
So like this one.
So, OK, let's go and finish this, we shall see how by No.
So we can see we shall see the only solution from the maps can go.
We don't have the solution.
So we will we should have no alternative.
So based on this version, we see if there is a partial inshala not.
So it's 2008, so that means power should be there.
And what you can do is, uh, you should get the reversal rate.
So I'm using this, uh, and see how let's use normal and see, uh, we should get into this, uh,
temporary so we can power shall, uh, w get.
Solutions and see that the and a. fired two percentage.
So it should be a longer term slash and Siddharta exit, so I got this one and we should see it pretty
soon.
So we do not get any.
Request here, so our comment has been failed.
So that's a partial.
So for this.
So we're trying to determine the portion of version.
We're going to finish this page.
I think those quotes in the past, partial one has been broken.
Come on.
So let's try.
Without the courts.
So are getting better, and so let me check my notes how I downloaded this.
OK, I did not use the Porsche.
OK.
There is no Porsche, so.
So what we are going to do is look.
So let's grab a copy.
Shelled.
So let's do this.
So what we are going to do is call Pete.
Ben, Ben, 16, 190.
So that share thresh and cirrhotics, sorry, S.P., some bizarre boy, and I'm going to move to Perske.
No copy do percentage and.
So this.
We shall see there no.
So give me one other request, so that means that Caird has been successfully copied what Wiggins's
percentage item?
Percentage.
So insider cedar pixie and I pay.
Correct.
One, two, three, four.
And upon correction, you could see on the chart there is not on.
One, two, three, four.
And this one.
So we got the show so that we might show our people.
So that means you can grab the flag.
System and for now, it is unique to those in need.
So let's try to matura exploit.
So you can just try for this to me, Julie, if this is 2003, controvert Tarasco, so there should
be some.
So I don't have this.
It's going down with this.
So the first.
Well, it's General Seatmates.
Why do you think zettabytes open?
OK, no, no, no, don't counter.
So now you can see the white.
So we already hosting this one.
So that's good copy.
Sure.
Kosmidis.
And to Kim.
So let's start in the red zone around four four four four.
So all these.
So if you don't know why this, uh, binary, so you can just grab the system in the phone book and
I love that expression.
So the comment should be the IP address and the number four four four four, and you should that you
should be getting Brookshire.
OK, it's Farid.
OK, maybe take some time, I didn't know to sure, sure we were.
So we got the shot.
So it took some time and we are still so this web may be backtracking, but you can do it.
So that's all for this video.
So what we have learned in this video is this confusion over his the person from that.
We get me crack of the hash and got the password and Robin and we should do the task, which downloaded
a script.
And in the script we got the web.
And from that option.
Well, the reversal.
And from that, we found out it's 2008 and it's mostly likely one, two to me to expect and we landed
and we got Brookshire.