00:45 – Begin of Recon
02:50 – Examining login request while GoBuster runs
05:35 – Noticing weird behavior by modifying db parameter in login request
07:30 – Finding what the Error numbers mean. (SQL Error Codes)
08:50 – Testing if we can trick the application into authentication against us
09:50 – Starting up metasploit to steal the login hash of a MYSQL Login
12:30 – Cracking the MySQL Hash with Hashcat
16:45 – Creating a databse locally for the application to authenticate to
23:00 –

HackTheBox – Kryptos
How to install:
– Download, extract and run .exe file,
(If your antivirus blocking file, pause it or disable it for some time.)
– Choose destination folder

How to Use:
Open destination folder and locate file notes.txt, open it and read step by step.
Enjoy!

Don’t forget to read instructions after installation.
Enjoy HackTheBox – Kryptos.

All files are uploaded by users like you, we can’t guarantee that HackTheBox – Kryptos are up to date.
We are not responsible for any illegal actions you do with theses files. Download and use HackTheBox – Kryptos on your own responsibility.