|
BLOCKBLOCK - HTB
by osamy7593 - Saturday November 16, 2024 at 07:12 PM
|
|
Nov 16, 2024, 07:12 PM
let's pwn .............
This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Asking for rep is not allowed
Nov 16, 2024, 09:31 PM
Not sure how to proceed with this machine, found this earlier
Available Accounts ================== (0) 0x5f40124804BFBb3f30De1026Eb5c9532Ed7639dA (100 ETH) (1) 0x0B62fdB9Cf384A4E08eeCB1220ea337c5793589b (100 ETH) (2) 0x182f036499e2f8D46cC58810aa545d395Ff0A5af (100 ETH) (3) 0xA63fBA54C4d04674DC9214BB5aa061F1BF7D9BF0 (100 ETH) (4) 0x4aa7Cf5442c277aD5Eb646F2BFBD7848753B9ceA (100 ETH) (5) 0xD40237eA6e77402143f2cD6e858cDA64a67b869E (100 ETH) (6) 0xa4679e980f2e9bE2B81C5Ba6923CAaaB8601598C (100 ETH) (7) 0x154AAc8C6844C5fDFDd020b7f4d1225Ec595FcdD (100 ETH) (8) 0x5e623BFE780162c90Cd8d411F542E930097Ed850 (100 ETH) (9) 0x95696A5b508E75F7481B7E4e01Cfc5521631F4fc (100 ETH) Private Keys ================== (0) 0xec9c4104d00f224fdc0ad3f5e74fecc2827dd36e449ad16b6c247e58bab97506 (1) 0x728e79707c6b1cf07ab75c9544f84bfd36ec8380bb498ba8303af1952b07c260 (2) 0x1f2296a2ae888832b5f043c91ed7df86d8b43e94e3e5fd9dc49b8639eddfabd7 (3) 0x646e3fb03ef9b4c897385713cf6b434a507e2d2f343c66c2a1cf3c5740ad97e4 (4) 0x5c6fba30c3a0a21264aedc5636c55d1b84be7db057f662faed19ee11dc997ef2 (5) 0xedf05f3ffbb0597b4d011067d7531426c518921d27509521bb4231c71205a813 (6) 0xc5c0949457093841f25c1f06a9f311931565be18dce6a80727e33cf6a6bd6ddd (7) 0x00c6efcf7cc9ae72ad620dded545521b6eb06bc6e2fb0541770a072f6bb343ce (8) 0xe5e293faa2c5d3e1deb38cb04f78b3b269ee1da522c27e9e5616992f11239252 (9) 0x1ad0f043fd74114ff6ce9b19c28dd88ed5a68db62f6b3993562bf9f4f7733ce2 HD Wallet ================== Mnemonic: token total estate error size edge sibling mystery crystal roast sea ripple Base HD Path: m/44'/60'/0'/0/{account_index} Gas Price ================== 20000000000 Gas Limit ================== 6721975 Call Gas Limit ================== 9007199254740991
npm install -g ganache-cli
ganache-cli rpc IP:8545 (Nov 16, 2024, 09:38 PM)MEGAZORD Wrote:(Nov 16, 2024, 09:31 PM)u412908 Wrote: Not sure how to proceed with this machine, found this earlier I think these are the default settings/accounts for any smart contract.. I can't tell
Nov 16, 2024, 10:04 PM
(Nov 16, 2024, 09:40 PM)u412908 Wrote: npm install -g ganache-cli AI says [*]Available Accounts: Lists the accounts with their addresses and the amount of ETH (100 ETH) each account has. These are generated for you by Ganache for testing purposes. [*]Private Keys: The corresponding private keys for each of the available accounts, which can be used to sign transactions or access the accounts
Nov 16, 2024, 11:58 PM
This is what i have been able to get doing recon:
the server on port 80 is a Werkzeug/3.0.3 8545 is rpc port for eth upon register on the service on port 80 i get a jwt with the following payload { "fresh": false, "iat": 1731800739, "jti": "596b9c1d-cf8c-4194-9e60-61205cfdf8ea", "type": "access", "sub": "testing", "nbf": 1731800739, "exp": 1732405539 } http://10.10.11.43/api/contract_source contains source of two contracts Chat.sol '// SPDX-License-Identifier: UNLICENSED\npragma solidity ^0.8.23;\n\n// import "./Database.sol";\n\ninterface IDatabase {\n function accountExist(\n string calldata username\n ) external view returns (bool);\n\n function setChatAddress(address _chat) external;\n}\n\ncontract Chat {\n struct Message {\n string content;\n string sender;\n uint256 timestamp;\n }\n\n address public immutable owner;\n IDatabase public immutable database;\n\n mapping(string user => Message[] msg) internal userMessages;\n uint256 internal totalMessagesCount;\n\n event MessageSent(\n uint indexed id,\n uint indexed timestamp,\n string sender,\n string content\n );\n\n modifier onlyOwner() {\n if (msg.sender != owner) {\n revert("Only owner can call this function");\n }\n _;\n }\n\n modifier onlyExistingUser(string calldata username) {\n if (!database.accountExist(username)) {\n revert("User does not exist");\n }\n _;\n }\n\n constructor(address _database) {\n owner = msg.sender;\n database = IDatabase(_database);\n database.setChatAddress(address(this));\n }\n\n receive() external payable {}\n\n function withdraw() public onlyOwner {\n payable(owner).transfer(address(this).balance);\n }\n\n function deleteUserMessages(string calldata user) public {\n if (msg.sender != address(database)) {\n revert("Only database can call this function");\n }\n delete userMessages[user];\n }\n\n function sendMessage(\n string calldata sender,\n string calldata content\n ) public onlyOwner onlyExistingUser(sender) {\n userMessages[sender].push(Message(content, sender, block.timestamp));\n totalMessagesCount++;\n emit MessageSent(totalMessagesCount, block.timestamp, sender, content);\n }\n\n function getUserMessage(\n string calldata user,\n uint256 index\n )\n public\n view\n onlyOwner\n onlyExistingUser(user)\n returns (string memory, string memory, uint256)\n {\n return (\n userMessages[user][index].content,\n userMessages[user][index].sender,\n userMessages[user][index].timestamp\n );\n }\n\n function getUserMessagesRange(\n string calldata user,\n uint256 start,\n uint256 end\n ) public view onlyOwner onlyExistingUser(user) returns (Message[] memory) {\n require(start < end, "Invalid range");\n require(end <= userMessages[user].length, "End index out of bounds");\n\n Message[] memory result = new Message[](end - start);\n for (uint256 i = start; i < end; i++) {\n result[i - start] = userMessages[user][i];\n }\n return result;\n }\n\n function getRecentUserMessages(\n string calldata user,\n uint256 count\n ) public view onlyOwner onlyExistingUser(user) returns (Message[] memory) {\n if (count > userMessages[user].length) {\n count = userMessages[user].length;\n }\n\n Message[] memory result = new Message[](count);\n for (uint256 i = 0; i < count; i++) {\n result[i] = userMessages[user][\n userMessages[user].length - count + i\n ];\n }\n return result;\n }\n\n function getUserMessages(\n string calldata user\n ) public view onlyOwner onlyExistingUser(user) returns (Message[] memory) {\n return userMessages[user];\n }\n\n function getUserMessagesCount(\n string calldata user\n ) public view onlyOwner onlyExistingUser(user) returns (uint256) {\n return userMessages[user].length;\n }\n\n function getTotalMessagesCount() public view onlyOwner returns (uint256) {\n return totalMessagesCount;\n }\n}\n' Database.sol '// SPDX-License-Identifier: GPL-3.0\npragma solidity ^0.8.23;\n\ninterface IChat {\n function deleteUserMessages(string calldata user) external;\n}\n\ncontract Database {\n struct User {\n string password;\n string role;\n bool exists;\n }\n\n address immutable owner;\n IChat chat;\n\n mapping(string username => User) users;\n\n event AccountRegistered(string username);\n event AccountDeleted(string username);\n event PasswordUpdated(string username);\n event RoleUpdated(string username);\n\n modifier onlyOwner() {\n if (msg.sender != owner) {\n revert("Only owner can call this function");\n }\n _;\n }\n modifier onlyExistingUser(string memory username) {\n if (!users[username].exists) {\n revert("User does not exist");\n }\n _;\n }\n\n constructor(string memory secondaryAdminUsername,string memory password) {\n users["admin"] = User(password, "admin", true);\n owner = msg.sender;\n registerAccount(secondaryAdminUsername, password);\n }\n\n function accountExist(string calldata username) public view returns (bool) {\n return users[username].exists;\n }\n\n function getAccount(\n string calldata username\n )\n public\n view\n onlyOwner\n onlyExistingUser(username)\n returns (string memory, string memory, string memory)\n {\n return (username, users[username].password, users[username].role);\n }\n\n function setChatAddress(address _chat) public {\n if (address(chat) != address(0)) {\n revert("Chat address already set");\n }\n\n chat = IChat(_chat);\n }\n\n function registerAccount(\n string memory username,\n string memory password\n ) public onlyOwner {\n if (\n keccak256(bytes(users[username].password)) != keccak256(bytes(""))\n ) {\n revert("Username already exists");\n }\n users[username] = User(password, "user", true);\n emit AccountRegistered(username);\n }\n\n function deleteAccount(string calldata username) public onlyOwner {\n if (!users[username].exists) {\n revert("User does not exist");\n }\n delete users[username];\n\n chat.deleteUserMessages(username);\n emit AccountDeleted(username);\n }\n\n function updatePassword(\n string calldata username,\n string calldata oldPassword,\n string calldata newPassword\n ) public onlyOwner onlyExistingUser(username) {\n if (\n keccak256(bytes(users[username].password)) !=\n keccak256(bytes(oldPassword))\n ) {\n revert("Invalid password");\n }\n\n users[username].password = newPassword;\n emit PasswordUpdated(username);\n }\n\n function updateRole(\n string calldata username,\n string calldata role\n ) public onlyOwner onlyExistingUser(username) {\n if (!users[username].exists) {\n revert("User does not exist");\n }\n\n users[username].role = role;\n emit RoleUpdated(username);\n }\n}\n'
Nov 17, 2024, 03:50 AM
(web3_env)─(kali㉿kali)-[~/keys]
└─$ python3 generate_address_hash.py Generated Hash: ef13252ed6edb02f7f855d810bd89fb345fa07c18948b877e0c3729a4a286011 This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Leeching | http://c66go4clkqodr7tdjfu76jztjs7w7d3fajdeypxn73v4ju3dt7g5yyyd.onion/Forum-Ban-Appeals if you feel this is incorrect.
Nov 17, 2024, 10:44 AM
eth_blockNumber works but other methods require some sort of token
curl -X POST http://ip:8545/ \ -H "Content-Type: application/json" \ -d '{"jsonrpc":"2.0","method":"eth_blockNumber","params":[],"id":1}'
Nov 17, 2024, 12:45 PM
Nov 17, 2024, 01:05 PM
any hint, any body, this one is tough probably cause I dont know anything about blockchain smart contract and stuff.
Nov 17, 2024, 01:16 PM
(This post was last modified: Nov 17, 2024, 01:16 PM by standby123.)
I got callback from a bot in the backend when I add an img tag in the username input when reporting a user
|
|
« Next Oldest | Next Newest »
|
| Possibly Related Threads… | |||||
| Thread | Author | Replies | Views | Last Post | |
| [FREE] 300+ Writeups PDF HackTheBox/HTB premium retired | 370 | 92,363 |
4 hours ago Last Post: lifolifo007 |
||
| Hack the box Pro Labs, VIP, VIP+ 1 month free Method | 23 | 2,200 |
7 hours ago Last Post: kkkato |
||
| [FREE] HackTheBox Academy - CBBH CDSA CPTS All Modules Flags | 20 | 2,505 |
Yesterday, 11:06 PM Last Post: op334 |
||
|
[FREE] HackTheBox All Cheatsheets | 3 | 406 |
Yesterday, 10:36 PM Last Post: op334 |
|
| CBBH Write Ups | 22 | 6,237 |
Yesterday, 06:39 AM Last Post: Usercomplex |
||
