Data Exfiltration Techniques Using HTTP & HTTPS | TryHackMe

🚀 Cyber Security Certification Notes
https://shop.motasem-notes.net/collections/cyber-security-study-notes
🚀OR Certification Notes with Cheat Sheets
https://buymeacoffee.com/notescatalog/extras
💡Cyber Security Notes | Membership Access
https://buymeacoffee.com/notescatalog/membership
🔥Download FREE Cyber Security 101 Study Notes
https://buymeacoffee.com/notescatalog/e/290985
****
The video discusses data exfiltration techniques using the HTTP protocol, explaining why HTTP is one of the stealthiest methods for exfiltrating data. It covers post-exploitation techniques and demonstrates them in a practical lab setup.
**********
Receive Cyber Security Field Notes and Special Training Videos
https://buymeacoffee.com/notescatalog/membership
Writeup
https://motasem-notes.net/data-exfiltration-techniques-http-https-tryhackme
*******
Store
https://buymeacoffee.com/notescatalog/extras
Patreon
https://www.patreon.com/motasemhamdan
LinkedIn
[1]: https://www.linkedin.com/in/motasem-hamdan-7673289b/
[2]: https://www.linkedin.com/in/motasem-eldad-ha-bb42481b2/
Instagram
https://www.instagram.com/motasem.hamdan.official/
Google Profile
https://maps.app.goo.gl/eLotQQb7Dm6aiL8z6
Twitter
https://twitter.com/ManMotasem
Facebook
https://www.facebook.com/motasemhamdantty/
****
00:00 Introduction to Data Exfiltration via HTTP
00:06 Why HTTP is Used for Data Exfiltration
00:21 Advantages of HTTP-Based Exfiltration
00:36 Using HTTP POST Requests for Exfiltration
01:02 Attack Setup: Victim & Attacker Machines
01:26 Setting Up an HTTP Exfiltration Server
02:08 Using HTTPS for Secure Exfiltration
02:28 HTTP Tunneling for Covert Data Transfer
03:03 Setting Up an HTTP Tunnel
03:24 Tools for HTTP Tunneling (Neo-reGeorg)
03:40 Practical Demonstration: Setting Up Exfiltration
04:04 Connecting to the Jump Box
04:29 Checking Apache Server Logs for POST Requests
05:01 Why POST Requests are Preferred for Exfiltration
06:06 Extracting Flag from Base64 Encoded Data
06:42 Sending Data via HTTP POST Requests
07:34 Configuring the Victim Machine
08:17 Identifying Data to Exfiltrate
09:00 Encoding and Sending Data as a POST Request
10:06 Verifying Data Reception on Attacker Machine
10:50 Fixing URL Encoding Issues in Received Data
11:51 Decoding and Extracting Exfiltrated Data
12:37 Introduction to HTTP Tunneling
13:00 Setting Up an HTTP Tunnel Server
13:38 Generating an Encrypted Tunneling Client
14:22 Uploading the Tunnel Client to Victim Machine
15:26 Establishing Connection to Tunnel Server
16:57 Using HTTP Tunnel for Internal Network Access
18:01 Accessing Hidden Web Resources via Tunneling
19:03 Extracting Internal Server Flags
20:25 Retrieving the First Flag
20:38 Retrieving the Second Flag
20:48 Conclusion and Final Thoughts