Hello! Would the curl cmd have worked if there wasn't an extra '/' after .htb at min 43:01? Just wanted to confirm if it would have still failed due to the authentication you mentioned. Thank you! Big fan!
Have you attempted the box prior? My target audience are people that are somewhat familiar with the box or are pausing to try to work along with the box.
At 50:02, it would have worked if we had entered the username and IP in raw format. It was expecting us to enter it, but we missed that, which is why it didn’t work. It wasn’t related to x-www-form-urlencoded.
