HTB Pentest Notes - Challenge
by StingEm - Saturday October 26, 2024 at 09:53 PM
#11
Thanks for sharing!!!!!!

This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Leeching | http://c66go4clkqodr7tdjfu76jztjs7w7d3fajdeypxn73v4ju3dt7g5yyyd.onion/Forum-Ban-Appeals if you feel this is incorrect.
Reply
#12
I was stuck after finding the main vulnerability but couldn't get the proper payload. Thanks for the directions!
Reply
#13
very easy))
* is treat directly, not wildcard
https://s7.gifyu.com/images/SP4pD.gif
htb-bot.mysellix.io

HTB Writeup. Challenge Flag. Exam Solution. CTF Carry.
We are your pentest company selling help to make you good.
Best price, DM if need anything. See anywhere cheaper, DM and we do better.
Reply
#14
im still stuck here "name=';CALL+EXEC('echo "ss" > /tmp/revshell')%3b--" after creat alias
Reply
#15
any idea of how to get the flag?
Reply
#16
Im stuck here name= ' or 1=0; CALL EXECVE('ls'); -- -
Reply
#17
(Oct 30, 2024, 09:45 AM)Art10n Wrote: Use it in the POST and with Burp Suite

I did that but I am getting a `500` error. Someone please help !

This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Leeching.
Reply
#18
(Dec 30, 2024, 06:32 PM)0xbeef Wrote:
(Oct 30, 2024, 09:45 AM)Art10n Wrote: Use it in the POST and with Burp Suite

I did that but I am getting a `500` error. Someone please help !

You may have already done this... but... 
Usually when that happens during a challenge - and I know all is correct - I reset / STOP the instance and then wait 2 minutes and estart - I usually get another IP and things work as they should. 

I just had to do it on Replace Me and it fixed the issue I was having - 30 minutes of double checking things to find out it was my Instance of the Challenge I was using.

I hope it helps!
Reply
#19
I made a free post of how to do this challenge step by step
Reply
#20
(Dec 30, 2024, 07:41 PM)whare Wrote: I made a free post of how to do this challenge step by step

Just saw it and saw my mistake too, I skipped something in the process

(Dec 30, 2024, 07:27 PM)StingEm Wrote:
(Dec 30, 2024, 06:32 PM)0xbeef Wrote:
(Oct 30, 2024, 09:45 AM)Art10n Wrote: Use it in the POST and with Burp Suite

I did that but I am getting a `500` error. Someone please help !

You may have already done this... but... 
Usually when that happens during a challenge - and I know all is correct - I reset / STOP the instance and then wait 2 minutes and estart - I usually get another IP and things work as they should. 

I just had to do it on Replace Me and it fixed the issue I was having - 30 minutes of double checking things to find out it was my Instance of the Challenge I was using.

I hope it helps!

Thanks for you reply, but I was also missing a step but will think of restarting next time

This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Leeching.
Reply


Possibly Related Threads…
Thread Author Replies Views Last Post
Heart [FREE] HackTheBox All Cheatsheets Tamarisk 14 746 23 minutes ago
Last Post: phas3lock
  [FREE] HackTheBox Academy - CBBH CDSA CPTS All Modules Flags Techtom 31 2,966 4 hours ago
Last Post: hwzus47431
  CBBH Write Ups hiddenhacker 24 6,465 4 hours ago
Last Post: reze
  [FREE] CPTS 12 FLAGS pulsebreaker 77 2,546 4 hours ago
Last Post: reze
  HTB Eloquia User and Root Flags - Insane Box 69646B 14 534 5 hours ago
Last Post: zamizamo

Forum Jump:


 Users browsing this forum: 1 Guest(s)