Скачать с ютуб Cyber Security | CTF | Vulnhub | namespaceS0S | Manual Enumeration, MaraCMS RCE в хорошем качестве

Cyber Security | CTF | Vulnhub | namespaceS0S | Manual Enumeration, MaraCMS RCE

🔍 Focus: Manual enumeration, realistic web app pentesting, privilege escalation attempts In this video, I walk through the namespaceSOS VulnHub box, which simulates a real-world penetration testing scenario. I was able to gain initial access but failed to achieve root privilege—highlighting the real-world challenges pentesters face. 🔑 Key techniques and takeaways: Importance of manual enumeration over automation Discovery of a hidden login page (/maracms/lorem.php) using default credentials Using Gobuster for directory brute-forcing to find changes.txt Leveraging SearchSploit to identify a remote code execution (RCE) vulnerability in MaraCMS Uploading a web shell and troubleshooting firewall restrictions (had to use ports 80/443) Gaining initial foothold via RCE Attempted various privilege escalation vectors, all unsuccessful—showing how sometimes boxes are designed to test lateral thinking 📌 Perfect for those practicing: Web application hacking Realistic enumeration strategies Vulnerability exploitation using SearchSploit Handling firewalled environments OSCP-like machine preparation 🚩 VulnHub Machine: namespaceSOS (https://www.vulnhub.com/entry/namespa...) 👍 Like, share, and subscribe for more VulnHub walkthroughs and ethical hacking tutorials! #VulnHub #MaraCMS #PenetrationTesting #EthicalHacking #CyberSecurity #CTF #PrivilegeEscalation #ManualEnumeration #SearchSploit #RCE #OSCPPrep #namespaceSOS #oscp #oscpprep #kali #kalilinux #hackthebox #hacker #tryhackme #hackingtutorial