Pentesting tutorial (What hacking actually looks like) | Learn with HTB (Episode #6)

The video demonstrates a complete network penetration test from initial enumeration to exploitation 0:13. Jake showcases how pen testers start with minimal information and work toward compromising a server 1:26.

Key Takeaways:
• The pen test follows three phases: enumeration (gathering target info), analysis (examining findings), and exploitation (attacking vulnerabilities) 2:32-5:45
• Using nmap, the tester discovers a web server on port 80 with a login page, which becomes the attack surface 5:45-6:48
• The exploitation phase reveals a SQL injection vulnerability in the login form, allowing authentication bypass 11:09-12:18
• By injecting specific SQL syntax, the tester comments out password verification and gains admin access 19:24

This demonstration shows how a simple SQL injection can lead to complete server compromise, highlighting the importance of proper input validation.

Sources:

• 0:13 Introduction to penetration testing concepts
• 1:26 Explanation of network pen testing goals
• 2:32-5:45 Enumeration and analysis phases
• 5:45-6:48 Discovering the web server attack surface
• 11:09-12:18 SQL injection vulnerability explanation
• 19:24 Successful authentication bypass demonstration