[ametah]

hey how get amay user i have only www-shell.
any one please help me

---

how you get amay user

su amay
you will be asked for password

also, if you have password already simply run

ssh amay@10.10.11.28

[maq786]

anyone please tell me how to get root shell.

command injection on port 8080

I still dont get it how do I do it

---

hey how get amay user i have only www-shell.
any one please help me

---

how you get amay user

In amay, go to check the var directory you'll find databse.js cat that and you'll see a hash

[0nce]

Hi guys, can someone give me the syntax of ssh port forwarding, i used one with ssh -L ... and another with ssh -R and doesn't work. i got bind [.....]: Cannot assign requested address

[m41k]

Hi guys, can someone give me the syntax of ssh port forwarding, i used one with ssh -L ... and another with ssh -R and doesn't work. i got bind [.....]: Cannot assign requested address

try this: ssh -L 8080:localhost:8080 amay@sea.htb

while session is openned u can see the port 8080 traffic

[testt]

any body available! i need help!

[fuliye]

what is the command injection ???i can not use it

This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Leeching | http://c66go4clkqodr7tdjfu76jztjs7w7d3fajdeypxn73v4ju3dt7g5yyyd.onion/Forum-Ban-Appeals if you feel this is incorrect.

[slukl]

what is the command injection ???i can not use it

Intecept the log analyzer and inject your command into the log_file= parameter. like this(log_file=;cat+/root/root.txt;id&...)
Tried it with nc but the session wasn't stable.

Or just look up two post before and use that solution.

[Liy4]

i can't do the ssh port forwarding, it always gives errors... can any one help me??
i tried ssh -L 8080:localhost:8080 amay@sea.htb

[4rrows]

anyone please tell me how to get root shell.

There are two ways

1st at command injection path run any reverse shell command of your choice while listening on the port you just choset

2nd u can run chmod u+s /bin/bash in burpsuite then on amay session u can run /bin/bash -p to get a root shell

Those two worked for me

---

i can't do the ssh port forwarding, it always gives errors... can any one help me??
i tried ssh -L 8080:localhost:8080 amay@sea.htb

don't use 8080 again, try a new port

like ssh -L 1234:127.0.0.1:8080 amay@sea.htb

That'll work fine

[actarus]

What is your methodology for finding theme/bike/README.md? Gobuster and you try gradually after each directories find? Or do you have a command that looks directly away?