Part 1: Hacking Web Apps (Verbose - Hack Smarter)
Source: YouTube · Tyler Ramsbey - Hack Smarter · published Sep 2, 2026 · 19:42
[BLUF]
This video initiates Part 1 of a walkthrough for the "Verbose" web application hacking lab on Hack Smarter, establishing a rigorous methodology for initial enumeration and reconnaissance 1:00. The instructor demonstrates environment setup, network scanning, and web application mapping to prepare for exploitation and privilege escalation 6:24.
Key Takeaways:
• The lab objective is to obtain two flags: one as an administrator and one as root, requiring enumeration, exploitation, and privilege escalation 2:25.
• RustScan and Nmap identified open ports 22 (SSH) and 80 (HTTP); SSH is configured for key-based authentication only, ruling out password brute-forcing 6:24.
• Adding the target IP to the local /etc/hosts file as verbose.hsm simplifies command execution and avoids repeated IP entry 7:41.
• The server header reveals a Python Flask backend, suggesting potential vulnerabilities like server-side template injection 10:05.
• Directory brute-forcing with dirsearch and vhost fuzzing identified login and registration endpoints, though no hidden vhosts were found 12:28.
• Caido proxy was configured with a specific scope to filter HTTP history, reducing noise and focusing traffic analysis on the target domain 15:52.
[Closing statement]
Viewers are challenged to register an account and perform their own initial enumeration of the web application before proceeding to the next part of the series.
Sources:
- 1:00 Introduction to the Verbose lab and the goal of teaching solid web app hacking methodology.
- 2:25 Definition of the lab objectives: enumerating, identifying, exploiting, and escalating to find flags.
- 6:24 Execution of RustScan and Nmap to identify open ports 22 and 80.
- 7:41 Configuration of the
/etc/hostsfile to map the target IP to a custom hostname. - 10:05 Identification of the Python Flask framework via server headers.
- 12:28 Utilization of
dirsearchand vhost fuzzing tools for web enumeration. - 15:52 Setup of Caido proxy with a specific scope to clean up HTTP history.
Generate CPE Credits
Generate a professional CPE document from this video's transcript.
Estimated credit: 0.5 CPE hours
Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.
Topic: Penetration Testing. Commonly maps to: Security Assessment and Testing, Security Operations. Exact CISSP domains are assigned during generation.
Free account. One generation at a time, with a daily limit.
CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.
Transcript Preview
First 800 characters of the transcript
What is up everyone? Welcome back to another video. This video is going to be part one of working through the Verbose lab on the Hack Smarter platform. This is a web app hacking lab, so if you are interested in web app hacking, I think you will really enjoy this lab. Now, I do want to give you a full disclosure. I am also the creator of this lab. When I work through these machines, I try for the most part to do them blind, but it's sort of impossible for me to do a machine blind that I made. But, my commitment to you is I'm going to go through this as slow as possible. I want to teach you solid methodology when it comes to web app hacking and enumeration. I want to focus on teaching as I go. So, you will learn a lot by following along with these videos. But, here's the thing, you'll learn …