[bmoon10]

Blazorized - Windows - Medium

Good luck everyone! Let's tackle this together!

https://app.hackthebox.com/machines/Blazorized

[xzin0vich]

I will follow this thread

[0xHublot]

I will follow this thread

Arrt de sucé stp , t'en a plein la bouche

This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Advertising telegram in stealer logs

[xzin0vich]

I will follow this thread

Arrt de sucé stp , t'en a plein la bouche

English only. Stop being useless on a usefull forum section.

[bmoon10]

1.could be CVE-2023-36558

2.jwt cookies are used -

{
  "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress": "superadmin@blazorized.htb",
  "http://schemas.microsoft.com/ws/2008/06/identity/claims/role": [
    "Posts_Get_All",
    "Categories_Get_All"
  ],
  "exp": xxxxxxx,
  "iss": "http://api.blazorized.htb",
  "aud": "http://api.blazorized.htb"
}

[OneplusSuper]

LFI?

![notimage.png](..../C:/Program+Files/MySQL/my.ini)

[DeDeLaPouille]

Swagger pages :

http://api.blazorized.htb/swagger/index.html#/
http://api.blazorized.htb/swagger/v1/swagger.json

[Anaunimans]

has anyone ran kerbrute

[bmoon10]

has anyone ran kerbrute

[+] guest@blazorized.htb - USER LOCKED OUT
[+] VALID USERNAME:      administrator@blazorized.htb

[defxsec]

[quote="shadow_monarch" pid='663351' dateline='1719692171']
Encontré un subdominio:


administrador.blazorized.htb
api.blazorized.htb
[/cita]

¿Que diccionario usaste para encontrar esos subdominios y que herramienta?

This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: English Only Forum| https://breachforums.ai/Forum-Ban-Appeals if you feel this is incorrect.