[monkeythefirst]

Hi everybody. How to get cookies from Proxmox site

http://10.9.0.1:8006

??? Thanks advance.

[peRd1]

Hi everybody. How to get cookies from Proxmox site

http://10.9.0.1:8006

??? Thanks advance.

That is the last step in finishing the box. It assumes you did everything required before. You also found the backup zip. Which means you can access it. So you did the prerequisities.

Once extracted it has everything required for a POC to be edited, adapted just a little bit, in order to forge the cookie. You forge cookies FOR the proxmox site, not FROM the site.

And finally use that cookie to login, be root, do your thing. and probably feeling achievement finishing the longest box of past year...

[Phuckchop]

Does anybody have a writeup for this box?

[CubeMadness3]

Anyone with write-up i can follow to root this machine? I already have the foothold (user) i'm stuck for 2 weeks now finding ways to root this machine. I already sent message to some folks around this forum asking for help rooting this machine. If anyone have detailed write-up or guide on rooting part. please thank you! Just Send me a message ?

[coolworker378]

thanks a lot

[hackwell]

Hi all. Help is needed. Stuck on ldap payload. I received all the flags and am now studying LDAP injections. I can’t find how to give injections in the dn. Please point me in the right direction or write me a personal message on how to reset the sysadmin password. Thank you.

you can't do this through ldap directly as the unintended has been patched.
you'd want to access gitea, get the secret to forge an engineer cookie for SSO, then you can reset the password.
If you look at the code from gitea you'll see that the password will be updated in ldap by the app, so you can ssh in as engineer.

[D0rke1e]

how to get the rsa key ?

[andr0l1]

This machine is insane lol.

[st123]

you can't do this through ldap directly as the unintended has been patched.
you'd want to access gitea, get the secret to forge an engineer cookie for SSO, then you can reset the password.
If you look at the code from gitea you'll see that the password will be updated in ldap by the app, so you can ssh in as engineer.

i have the Pin and the source code, and trying the reset the password for kian.rodriguez but steps not working. can someone share the steps again.
[/quote]

Hey did you manage to get root. im stuck on bruting bitwarden. its taking too long and killing my cpu.

[gazgak001]

I cant find JWT_SECRET at gitea

From commits "people" repo.   If you need help hit me up a DM.

---

you can't do this through ldap directly as the unintended has been patched.
you'd want to access gitea, get the secret to forge an engineer cookie for SSO, then you can reset the password.
If you look at the code from gitea you'll see that the password will be updated in ldap by the app, so you can ssh in as engineer.

i have the Pin and the source code, and trying the reset the password for kian.rodriguez but steps not working. can someone share the steps again.

Hey did you manage to get root. im stuck on bruting bitwarden. its taking too long and killing my cpu.
[/quote]

You have disabled private messages. @st123