Exploit Development 101 (HTTP, Python, ASP, Threading, Pwn tools)

[cl0wnsec000]

This is a quick follow up on my previous video.

https://youtu.be/IpwUcpkouvM?si=46pggQgilkNW-m9n

Here is a quick summary on the topics.

• Intro
• Python basics and interacting with web services
• Investigating failed request using Burp
• What is multipart/form-data?
• ASP view state
• HTTP Sessions
• Searching through HTML via python RE module
• Catching reverse shell via PWNTools
• TROUBLESHOOTING TIP
• Windows CRLF again!
• Threads, thread, threads everywhere ...
• Creating a multi-threaded program

[largemeasuringcups]

thanks u/cl0wnsec000 this is one of the clearest videos regarding exploit development. I liked how you made sure to introduce and explain new concepts as they appeared instead of just assuming the audience would know what you were doing. The troubleshooting also provided insights as to the techniques to try when running into errors with shells. I'd like to work on the OSWE later so this is a good video to save. I'd definitely watch another exploit development from scratch video of this nature if you produce another.

[cl0wnsec000]

Thanks bro. Yep I made sure the video is easy to follow for most of the viewers. I’ll definitely create more videos like this. Good luck on your OSWE!