[trevor69000]

https://app.hackthebox.com/machines/599
Lets begin guys
All the best!!

[0x667sec]

Good luck & have fun everyone

[asdfmonster]

Open 22
Open 80

comprezzor.htb

[chief999]

found sub domains
report.comprezzor.htb
auth.comprezzor.htb

[Art10n]

auth [Status: 302, Size: 199, Words: 18, Lines: 6, Duration: 424ms]
report [Status: 200, Size: 3166, Words: 1102, Lines: 109, Duration: 427ms]
dashboard [Status: 302, Size: 251, Words: 18, Lines: 6, Duration: 425ms]

http://report.comprezzor.htb/report_bug

[Globules]

Probably need to bypass jsDelivr trought report forms

[slukl]

Anyone tried to get a backdoor using the LZMA algorithm?
https://thehackernews.com/2024/03/urgent...in-xz.html

https://github.com/karcherm/xz-malware

[asdfmonster]

I feel like that exploit is too recent for a box this early in the season but thats just a hunch.

[jsvensson]

Found:
http://dashboard.comprezzor.htb/
http://dashboard.comprezzor.htb/backup
http://dashboard.comprezzor.htb/resolve
But with cookie tamper to admin: 500 INTERNAL SERVER ERROR

[osamy7593]

I think we have a XSS on http://report.comprezzor.htb/report_bug?

i thougt that but there is jsdelivr

This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Asking for rep is not allowed