webpwnized's channel

1,722

1,722 subscribers

169,776 video views

webpwnized uploaded a video 12 hours ago

30:41

ISSA 2013 Web Pen-testing Workshop - Part 12 - JSON Injection

14 views

Instructor: Jeremy Druin (webpwnized)

Twitter: @webpwnized

Title: ISSA KY Web Application Pen Testing Workshop: Part 12

Date: May 18th 2013

Tools Used: Mutillidae 2.5.7 (hxxp://sourceforge.net/projects/mutillidae/), Burp S...
webpwnized uploaded a video 16 hours ago

30:02

ISSA 2013 Web Pen-testing Workshop - Part 9 - HTML & Javascript Injection

20 views

Instructor: Jeremy Druin (webpwnized)

Twitter: @webpwnized

Title: ISSA KY Web Application Pen Testing Workshop: Part 9

Date: May 18th 2013

Tools Used: Mutillidae 2.5.7 (hxxp://sourceforge.net/projects/mutillidae/), Burp Su...
webpwnized uploaded a video 18 hours ago

25:31

ISSA 2013 Web Pen-testing Workshop - Part 7 - Webshells

17 views

Instructor: Adiran Crenshaw (irongeek)

Title: ISSA KY Web Application Pen Testing Workshop: Part 7

Date: May 18th 2013

Tools Used: Mutillidae 2.5.7 (hxxp://sourceforge.net/projects/mutillidae/), Burp Suite 1.5 Free Edition...
webpwnized uploaded a video 19 hours ago

32:45

ISSA 2013 Web Pen-testing Workshop - Part 6 - Local/Remote File Inclusion

12 views

Instructor: Jeremy Druin (webpwnized)

Twitter: @webpwnized

Title: ISSA KY Web Application Pen Testing Workshop: Part 6

Date: May 18th 2013

Tools Used: Mutillidae 2.5.7 (hxxp://sourceforge.net/projects/mutillidae/), Burp Su...
webpwnized uploaded a video 1 day ago

14:49

ISSA 2013 Web Pen-testing Workshop - Part 4 - Auth Bypass via SQLi & Cookie Tampering

29 views

Instructor: Jeremy Druin (webpwnized)

Twitter: @webpwnized

Title: ISSA KY Web Application Pen Testing Workshop: Part 4

Date: May 18th 2013

Tools Used: Mutillidae 2.5.7 (hxxp://sourceforge.net/projects/mutillidae/), Burp Su...
webpwnized uploaded a video 1 day ago

22:08

ISSA 2013 Web Pen-testing Workshop - Part 3 - Uploading Web Shells via SQL Injection

31 views

ISSA 2013 Web Pen-testing Workshop - Part 3 - Uploading Web Shells via SQL Injection

Instructor: Jeremy Druin (webpwnized)

Twitter: @webpwnized

Title: ISSA KY Web Application Pen Testing Workshop: Part 3

Date: May 18th 20...
webpwnized uploaded a video 1 day ago

47:14

ISSA 2013 Web Pen-testing Workshop - Part 2 - SQL Injection

46 views

ISSA 2013 Web Pen-testing Workshop - Part 2 - SQL Injection

Instructor: Conrad Reynolds

Title: ISSA KY Web Application Pen Testing Workshop: Part 2

Date: May 18th 2013

Tools Used: Mutillidae 2.5.7 (hxxp://sourceforge.net/...
webpwnized uploaded a video 1 day ago

57:40

ISSA 2013 Web Pen-testing Workshop - Part 1 - Intro to Mutillidae, Burp Suite & Injection

63 views

Instructor: Jeremy Druin (webpwnized)

Twitter: @webpwnized

Title: ISSA KY Web Application Pen Testing Workshop: Part 1

Date: May 18th 2013

Tools Used: Mutillidae 2.5.7 (hxxp://sourceforge.net/projects/mutillidae/), Burp Su...
webpwnized uploaded, replied to a comment from Khal Dusan and posted 3 days ago

Customize your message

33:10

Installing Kali Linux on Virtual Box with Nessus and Metasploit

2,095 views

Author: Jeremy Druin (webpwnized)

Video Release Announcements: Twitter @webpwnized

Title: Installing Kali Linux on Virtual Box with Nessus and Metasploit

This video is from the April 2013 workshop of the KY ISSA covering ...
webpwnized uploaded, replied to a comment from Kiran Karnad and liked 2 weeks ago

Your welcome. Ive never had the opportunity to visit KL. Perhaps a conference will get me out that way someday.

1:10:58

Basics of using sqlmap - ISSA KY Workshop - February 2013

4,362 views

Author: Jeremy Druin

Twitter: @webpwnized

YouTube Channel: webpwnized

Software required: Backtrack 5 R3 with sqlmap, Mutillidae Web Pen Test Training Environment (hxxp://sourceforge.net/projects/mutillidae/files/mutillidae...
webpwnized replied to a comment from Jan Sajec 1 month ago

You plug a compatible USB network card such as an edimax or alfa into the host USB port. Let windows and virtual box install usb drivers for the device. Virtual box will say when its done. Then in Virtual Box in the Guest (Linux), click "devices", "usb" and click the USB network card to connect the card to the guest operating system.

1:07:19

Building a Virtual Lab to Practice Pen Testing

5,777 views

This talk was recorded by irongeek.com administrator Adrian Crenshaw (@irongeek_adc). It covers a quick overview of setting up a pen-testing practi...
webpwnized uploaded, replied to a comment from tek87 and liked 1 month ago

No thanks. If you would like to redo the video, Ill be happy to post a link to your video.

1:19:51

Introduction to buffer overflows from ISSA KY workshop 6

1,741 views

This recording is from the Kentucky ISSA Workshop #6 from the November 2012 meeting. In part 5, using Metasploit was covered. In this workshop, buffer overflow vulnerabilities were examined more closely to see how Metasplo...
webpwnized replied to a comment from Raventattoo 1 month ago

Its definitely not looking for any particular sequence of characters. The MySQL database is "live" and all the vulnerabilities are real. Some pages are simply programmed different than other pages such that using the stereotypical injections might not work.

4:47

mutillidae-basics-of-sql-injection-using-union.mp4

2,867 views

Using Mutillidae, we methodically find the number of columns needed to use a UNION SQL Injection and also determine which columns in the web pages ...
webpwnized uploaded and commented 2 months ago

@stephalap its possible that the web site is offline,unreacjable,and/or behind a proxy. Ping to see if host reachable. burp allows upstream proxy if thay is the issue. try reaching the siye in a regular browser as well.

57:03

NOWASP Mutillidae: Introduction to Installing, Configuring, and Using Burp-Suite Proxy

3,122 views

Author: webpwnized (Twitter @webpwnized)

Tool: Burp-Suite 1.5 Free Edition

After installing Burp-Suite, this video covers how to configure the proxy to intercept, pause, alter, and test requests and responses between a we...
webpwnized uploaded and replied to a comment from Segun Lawal 2 months ago

Hello. You can use the link in the description of the video. You might need to click "More" to see the full description.

58:42

Introduction to HTML Injection (HTMLi) and Cross Site Scripting (XSS) Using Mutillidae

1,984 views

Author: Jeremy Druin

Twitter: @webpwnized

From: Kentucky ISSA March 2013 Meeting

Title: Introduction to HTML Injection (HTMLi) and Cross Site Scripting (XSS) Using Mutillidae

Required Software (To Follow Along): hxxp://sou...
webpwnized uploaded a video 2 months ago

45:10

Introduction to Pen Testing Simple Network Management Protocol (SNMP)

3,488 views

Author: Jeremy Druin

Updates - Twitter: @webpwnized

From: Kentucky ISSA March 2013 Workshop

Title: Introduction to Pen Testing Simple Network Management Protocol (SNMP)

Required Software (To Follow Along): Backtrack, SNMP ...
webpwnized replied to a comment from Dhruv Seth 3 months ago

The version of Metasploit might not support mapping the vulnerabilities to the exploits or perhaps the version does parse the vulnerabilities out of the Nessus XML file. Rapid7 has a community forum in which they might be able to say for sure if you post the details of how you imported the results and post the versions of Nessus, Metasploit, and the Nessus file export you are using.

1:16:53

how to exploit metasploitable 2 with nmap nexpose nessus metasploit

10,898 views

This video tutorial covers exploiting Metasploitable-2 to get a root shell and eventually a terminal via a valid "sudo-able" login over SSH.

Two m...
webpwnized replied to a comment from Alexandre Freire 4 months ago

I noticed later versions of Metasploit Community do not seem to show the related exploit anymore. Im not sure why as it worked in prior versions. The latest version I have is also not showing this information.

4:40

mutillidae-basics-of-exploiting-vulnerabilities-with-metasploit-community-edition.mp4

2,235 views

This video covers the basics of launching exploits from Metasploit Community Edition. The exploits were discovered in a previous step both with Nex...
webpwnized uploaded, replied to a comment from Fedrik Nemsis and liked 4 months ago

The majority of the topics will be the same. The default port for MSSQL 2003 may be 1433 rather than 1031, but that can be verified by running nmap against UDP/1434 as shown in the video.

1:37:34

Pen Testing SQL Server 2008 - Kentuckiana ISSA Monthly Workshop - January 2012

503 views

Pen testing, auditing, and remediating Microsoft SQL Server 2008 by Jeremy Druin (Twitter: @webpwnized) from the Kentuckiana ISSA Monthly Workshop - January 2012 - Parts 1 and 2 (Edited together).

Recorded and edited by ...
webpwnized replied to a comment from Fedrik Nemsis 4 months ago

Perhaps the number of columns is wrong. Try 4 columns, then 5, etc.

4:55

mutillidae-inject-root-web-shell-backdoor-via-sql-injection.mp4

3,113 views

Using somewhat advanced SQL injection, we inject a new PHP file into the web root of the PHP server using and SQL injection vulnearbility in Mutill...
webpwnized replied to a comment from Fedrik Nemsis 5 months ago

You should update the browser to a version that supports HTML5 web storage. The current Firefox will do nicely.

32:44

mutillidae-gaining-administrative-shell-access-via-command-injection.mp4

1,711 views

Using command injection against the Mutillidae web application, we gain a root shell (Administrative Windows cmd shell). The server is fully patche...
webpwnized replied to a comment from Zynthesist 6 months ago

My best guess since two different VMs are having the same issue is that the overall configuration settings for the host-only network in Virtual Box are not working. Go to FILE then PREFERENCES to open the Virtual Box settings. Click on the NETWORK tab and be certain that the VIRTUAL BOX HOST ONLY adapter is both set up and also has the default values in the set up. If there is already an adapter, perhaps delete it and create a new one.

12:50

mutillidae-how-to-install-metasploitable-2-with-mutillidae-on-virtual-box.mp4

7,397 views

This video covers installing Rapid7's Metasploitable 2.0 with Mutillidae on a Virtual Box Host Only network. In addition to reviewing how to instal...
webpwnized replied to a comment from FreestylerAlbert 6 months ago

In metasploitable2, the username and password which has sudo privileges is msfadmin. password is the same. once you login as msfadmin, sudo to chmod the files.

30:48

Mutillidae SQL Injection via AJAX request with JSON response

1,425 views

This video by webpwnized (@webpwnized) covers pen-testing an SQL Injection vulnerability that occurs in an AJAX request made in the background. The...

About webpwnized's channel

This channel contains short, topic-focused videos detailing web application pen testing, secure web development, and the tools used to test web applications.

New videos and new releases of Mutillidae will be tweeted to @webpwnized.

Mutillidae Releases

by webpwnized

Date Joined Oct 19, 2011

Country United States