Skip to main content
CPEBuddy
Part 3: Hacking Web Apps (Verbose - Hack Smarter)

Part 3: Hacking Web Apps (Verbose - Hack Smarter)

Source: YouTube · Tyler Ramsbey - Hack Smarter · published Sep 10, 2026 · 29:09

Penetration Testing
No ratings yet Log in to rate
Transcript Available
Description

Part three of the Verbose Lab walkthrough: intercepting requests reveals a verbose API leaking all users' credentials, enabling full admin account takeover 6:09.

Key Takeaways:
• Intercepting every request (not just browsing history) forces you to slow down and catch hidden API calls you'd otherwise miss 1:31.
• A hidden API exposes all usernames, emails, roles, and clear-text passwords—based on a real bug bounty where the presenter achieved full account takeover of 1M+ users via leaked password reset and MFA tokens 6:09.
• Critical findings warrant early disclosure—reported to the client the same day, not at final report 8:53.
• Admin MFA is a 4-digit code with no rate limiting; Caido's Automate sprays 0000–9999, and a 302 at payload 2332 grants admin access and the first flag 13:24.
• Disabling MFA requires no re-auth, enabling a stored XSS payload via messaging that silently disables admin MFA—showing XSS can do far more than steal cookies 21:43.

Next up: achieving remote code execution on the backend server, with multiple paths to explore 28:45.

Sources:

  • 1:31 Intercepting every request methodology
  • 6:09 Verbose API discovery and bug bounty story
  • 8:53 Early disclosure for critical findings
  • 13:24 Brute-forcing the 4-digit MFA code
  • 21:43 XSS disabling admin MFA
  • 28:45 Next: remote code execution

Generate CPE Credits

Generate a professional CPE document from this video's transcript.

Estimated credit: 0.5 CPE hours

Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.

Topic: Penetration Testing. Commonly maps to: Security Assessment and Testing, Security Operations. Exact CISSP domains are assigned during generation.

CISSP Domain Mapping
Learning Objectives
Self-Assessment Questions
PDF Export Ready

Free account. One generation at a time, with a daily limit.

CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.

Watch on YouTube

Transcript Preview

First 800 characters of the transcript

What is up everyone? Welcome back to another video. This is going to be part three of working through the verbose lab on the hacksmarter platform. This is a web app pentesting lab and I'm trying to treat it like a real web app pentest. Now, here's the thing. You're going to learn a lot by watching me. You're going to learn significantly more by hacking alongside of me. So, if you haven't already, make sure you boot up the Verbose Lab, boot up your Kali Linux machine, get your black hoodie on, and get ready to hack all of the things. You will also see that there is chat on the screen right here. I make these videos while I live stream. I live stream all the time, but we have a problem. You aren't here. What are you doing with your life? There are over 70 people in the live studio audience, …