HTB Pentest Notes - Challenge
by StingEm - Saturday October 26, 2024 at 09:53 PM
#11
Thanks for sharing!!!!!!

This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Leeching | http://c66go4clkqodr7tdjfu76jztjs7w7d3fajdeypxn73v4ju3dt7g5yyyd.onion/Forum-Ban-Appeals if you feel this is incorrect.
Reply
#12
I was stuck after finding the main vulnerability but couldn't get the proper payload. Thanks for the directions!
Reply
#13
very easy))
* is treat directly, not wildcard
https://s7.gifyu.com/images/SP4pD.gif
htb-bot.mysellix.io

HTB Writeup. Challenge Flag. Exam Solution. CTF Carry.
We are your pentest company selling help to make you good.
Best price, DM if need anything. See anywhere cheaper, DM and we do better.
Reply
#14
im still stuck here "name=';CALL+EXEC('echo "ss" > /tmp/revshell')%3b--" after creat alias
Reply
#15
any idea of how to get the flag?
Reply
#16
Im stuck here name= ' or 1=0; CALL EXECVE('ls'); -- -
Reply
#17
(Oct 30, 2024, 09:45 AM)Art10n Wrote: Use it in the POST and with Burp Suite

I did that but I am getting a `500` error. Someone please help !

This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Leeching.
Reply
#18
(Dec 30, 2024, 06:32 PM)0xbeef Wrote:
(Oct 30, 2024, 09:45 AM)Art10n Wrote: Use it in the POST and with Burp Suite

I did that but I am getting a `500` error. Someone please help !

You may have already done this... but... 
Usually when that happens during a challenge - and I know all is correct - I reset / STOP the instance and then wait 2 minutes and estart - I usually get another IP and things work as they should. 

I just had to do it on Replace Me and it fixed the issue I was having - 30 minutes of double checking things to find out it was my Instance of the Challenge I was using.

I hope it helps!
Reply
#19
I made a free post of how to do this challenge step by step
Reply
#20
(Dec 30, 2024, 07:41 PM)whare Wrote: I made a free post of how to do this challenge step by step

Just saw it and saw my mistake too, I skipped something in the process

(Dec 30, 2024, 07:27 PM)StingEm Wrote:
(Dec 30, 2024, 06:32 PM)0xbeef Wrote:
(Oct 30, 2024, 09:45 AM)Art10n Wrote: Use it in the POST and with Burp Suite

I did that but I am getting a `500` error. Someone please help !

You may have already done this... but... 
Usually when that happens during a challenge - and I know all is correct - I reset / STOP the instance and then wait 2 minutes and estart - I usually get another IP and things work as they should. 

I just had to do it on Replace Me and it fixed the issue I was having - 30 minutes of double checking things to find out it was my Instance of the Challenge I was using.

I hope it helps!

Thanks for you reply, but I was also missing a step but will think of restarting next time

This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Leeching.
Reply


Possibly Related Threads…
Thread Author Replies Views Last Post
  [FREE] 300+ Writeups PDF HackTheBox/HTB premium retired Tamarisk 376 93,740 1 hour ago
Last Post: Sukon
  [FREE] CPTS • CWES • CDSA • CWEE Exam Hint 3midjets 233 32,346 1 hour ago
Last Post: Sukon
  [FREE] CPTS 12 FLAGS pulsebreaker 74 2,369 1 hour ago
Last Post: Sukon
  [MEGALEAK] HackTheBox ProLabs, Fortress, Endgame - Alchemy, 250 Flags, leak htb-bot htb-bot 89 8,101 6 hours ago
Last Post: Xploitd
Heart [FREE] HackTheBox All Cheatsheets Tamarisk 10 629 10 hours ago
Last Post: chufoni

Forum Jump:


 Users browsing this forum: 1 Guest(s)