[asdfmonster]

cant figure out what to do after user

[pwn696969]

Any hint to get to xander

[arenita666]

help , I don't know how to proceed after using sqlmap

[pwn696969]

show your output

[arenita666]

show your output

After decrypting the password, I log in, but I still get error 419

[PADL]

lets see what you've got...

[asdfmonster]

--threads 10

will make things a little faster

[arenita666]

atabase: usage_blog
Table: admin_users
[1 entry]
+----------+--------------------------------------------------------------+
| username | password |
+----------+--------------------------------------------------------------+
| admin | $2y$10$ohq2kLpBH/ri.P5wR0P3UOmc24Ydvl9DA9H1S6ooOMgH5xVfUPrL2 |
+----------+--------------------------------------------------------------+

[pwn696969]

admin.usage.htb/uploads/<filename>.php

[mrhi]

admin.usage.htb/uploads/<filename>.php

not found it must be a different path

go back to where you upload and there's a download button on the thumbnail that links to the path. also if anyone is having trouble with 419 status just refresh the login page and keep removing your cookies until it works.