Microsoft IIS Web Server Vulnerabilities | CTF Walkthrough | OSCP Video Course Prep

📄 Cyber Security Certification Notes & Cheat Sheets https://buymeacoffee.com/notescatalog... 🚀(2nd link) Cyber Security Certification Notes & Cheat Sheets https://shop.motasem-notes.net/collec... 💡Cyber Security Notes | Membership Access https://buymeacoffee.com/notescatalog... 🧩Cybersecurity Direct Coaching & Mentoring https://shop.motasem-notes.net/collec... 🔥Download FREE Cyber Security 101 Study Notes https://buymeacoffee.com/notescatalog... 🧠 Get Strategic cyber security and tech insights weekly to your email by joining my newsletter below https://buymeacoffee.com/notescatalog... 📊Blog Writeups https://www.motasem-notes.net *** In this video-walkthrough, we covered a scenario of a vulnerable Microsoft IIS web server which was leveraged to compromise a host machine. We used a lab scenario HackTheBox Devel, while relatively simple, demonstrates the security risks associated with some default program configurations. It is a beginner-level machine which can be completed using publicly available exploits. The material of this video can be used to prepare for OSCP Certification. ********* Wiki https://wiki.motasem-notes.net/ Writeup https://motasem-notes.net/microsoft-i... HackTheBox Devel https://www.hackthebox.com/machines/d... ********* Store https://buymeacoffee.com/notescatalog... Instagram   / motasem.hamdan.tech   TikTok   / motasemhamdan0   Patreon   / motasemhamdan   Instagram   / motasem.hamdan.tech   Google Profile https://maps.app.goo.gl/eLotQQb7Dm6ai... LinkedIn [1]:   / motasem-hamdan-7673289b   [2]:   / motasem-eldad-ha-bb42481b2   Twitter   / manmotasem   Facebook   / motasemhamdantty   ****** 0:04 - Introduction and Overview of the Devil Machine 0:38 - Initial Scanning and Enumeration 1:29 - FTP and Anonymous Login Discovery 3:00 - Testing File Upload 4:20 - OS Identification and Further FTP Exploration 5:32 - Creating and Uploading a Malicious Payload 7:48 - Triggering the Payload and Getting a Reverse Shell 8:22 - Privilege Escalation Exploration 9:13 - Identifying Windows Version and Targeting Exploits 11:08 - Downloading and Compiling Exploits 14:00 - Executing the Exploit and Gaining System Access 22:15 - Alternative Privilege Escalation Techniques 23:58 - Conclusion and Final Thoughts