HTB CozyHosting Help
by pokemon6969 - Sunday September 3, 2023 at 07:43 PM
#21
(Sep 04, 2023, 04:05 AM)exer Wrote:
(Sep 04, 2023, 12:52 AM)hackxor Wrote:
(Sep 04, 2023, 12:51 AM)creativethinking2111 Wrote:
(Sep 04, 2023, 12:49 AM)hackxor Wrote:
(Sep 04, 2023, 12:49 AM)creativethinking2111 Wrote: Need help on getting user. I am currently in a shell as app. No clue what to do next. Thank you!

looks for postgresql

I have been doing just that. Was able to find kanderson creds that are useless but nothing else

inside the app folder has a .jar file, you gotta reverse this file and get the creds for postgre

How do i extract or decompile the jar file?

you can use the jd-gui
#22
this machine is very hard i think
#23
Root is easy just gtfobins
#24
I got connection back to my vm but after I type command it doesn't display anything back
I try all command to spawn shell but still not work any suggestion?
https://sushant747.gitbooks.io/total-osc...hells.html
#25
(Sep 04, 2023, 12:35 AM)guacadmin Wrote:
(Sep 04, 2023, 12:00 AM)monkeythefirst Wrote: Hi everybody. I can not get /admin page; i got Cookie (JSESSIONID) of user kanderson, reloads some pages with it - no result. PLS any hint. Thanks advance.

you just need to edit your current cookie and refresh the webpage. (your cookie should now be the kanderson cookie that you found on that endpoint.)

hay...as you said edit my current cookie....i dont have one when i send a request the /admin page it generates a new cookie but the thing is that the cookie olny shows un the the response and dosent reflect on the redirect to /login

This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Leeching | https://breachforums.ai/Forum-Ban-Appeals if you feel this is incorrect.
#26
(Sep 04, 2023, 02:07 PM)hacker1353 Wrote:
(Sep 04, 2023, 12:35 AM)guacadmin Wrote:
(Sep 04, 2023, 12:00 AM)monkeythefirst Wrote: Hi everybody. I can not get /admin page; i got Cookie (JSESSIONID) of user kanderson, reloads some pages with it - no result. PLS any hint. Thanks advance.

you just need to edit your current cookie and refresh the webpage. (your cookie should now be the kanderson cookie that you found on that endpoint.)

hay...as you said edit my current cookie....i dont have one when i send a request the /admin page it generates a new cookie but the thing is that the cookie olny shows un the the response and dosent reflect on the redirect to /login

go to homepage, replace the default JSESSIONID with the new one from sessions and visit /admin
#27
(Sep 04, 2023, 02:07 PM)hacker1353 Wrote:
(Sep 04, 2023, 12:35 AM)guacadmin Wrote:
(Sep 04, 2023, 12:00 AM)monkeythefirst Wrote: Hi everybody. I can not get /admin page; i got Cookie (JSESSIONID) of user kanderson, reloads some pages with it - no result. PLS any hint. Thanks advance.

you just need to edit your current cookie and refresh the webpage. (your cookie should now be the kanderson cookie that you found on that endpoint.)

hay...as you said edit my current cookie....i dont have one when i send a request the /admin page it generates a new cookie but the thing is that the cookie olny shows un the the response and dosent reflect on the redirect to /login

in this case Replace the same cookies of kanderson
#28
(Sep 04, 2023, 04:05 AM)exer Wrote:
(Sep 04, 2023, 12:52 AM)hackxor Wrote:
(Sep 04, 2023, 12:51 AM)creativethinking2111 Wrote:
(Sep 04, 2023, 12:49 AM)hackxor Wrote:
(Sep 04, 2023, 12:49 AM)creativethinking2111 Wrote: Need help on getting user. I am currently in a shell as app. No clue what to do next. Thank you!

looks for postgresql

I have been doing just that. Was able to find kanderson creds that are useless but nothing else

inside the app folder has a .jar file, you gotta reverse this file and get the creds for postgre

How do i extract or decompile the jar file?

just do: unzip filename.jar
#29
(Sep 04, 2023, 04:09 PM)4ip0k Wrote:
(Sep 04, 2023, 04:05 AM)exer Wrote:
(Sep 04, 2023, 12:52 AM)hackxor Wrote:
(Sep 04, 2023, 12:51 AM)creativethinking2111 Wrote:
(Sep 04, 2023, 12:49 AM)hackxor Wrote: looks for postgresql

I have been doing just that. Was able to find kanderson creds that are useless but nothing else

inside the app folder has a .jar file, you gotta reverse this file and get the creds for postgre

How do i extract or decompile the jar file?

just do: unzip filename.jar

It doesn't let me do it, i get permission denied every time.
#30

pm me if you want the dump report

This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Reselling another users exam.


Possibly Related Threads…
Thread Author Replies Views Last Post
  [FREE] HackTheBox Dante - complete writeup written by Tamarisk Tamarisk 602 91,754 4 hours ago
Last Post: sabero_exe
  [FREE] CPTS 12 FLAGS pulsebreaker 68 1,956 Today, 09:54 AM
Last Post: VictorPipeau
  [FREE] 300+ Writeups PDF HackTheBox/HTB premium retired Tamarisk 371 92,851 Today, 08:48 AM
Last Post: phannguyenbaouy1
  [FREE] HackTheBox Academy - CBBH CDSA CPTS All Modules Flags Techtom 21 2,620 Today, 05:08 AM
Last Post: popoler
  Hack the box Pro Labs, VIP, VIP+ 1 month free Method RedBlock 23 2,271 Yesterday, 02:10 PM
Last Post: kkkato

Forum Jump:


 Users browsing this forum: 1 Guest(s)