[jettguo]

thanks. I want to earn credit to unlock the writeup.

[formycode64]

I got till vault creds using mimikatz but stuck after that cant find the password using dpapi::creds and masterkey
any hints would be appreciated

[GWTW]

Sound great to hear that folks.

You can rate my profile via this link
https://breachforums.rs/reputation.php?uid=97449

"Rate User" for future endorsement!!

[Lights_Out]

Thank you for posting this.

[testern22]

Very nice and handy Good writeup!

[dickenson123]

have they patched the unintended mysql pathway to root yet?

[hint80h]

Thanks for explanation

I would like to share you the Office - HTB Writeup. It's the Hard severity box and too much steps to understand and take part in.

For those who don't have enough 8 credits, 
you can earn 1 credit as per one reply/post in the forum' posts and come back with enough credits to support the efforts.
Participate in the forum and enjoy the threads!

User Flag
-------------
Web DB Credential - Joomla. 4.2.7 -  CVE-2023-23752
Joomla Administrator web page bruteforce to reverse shell.
Earn user flag with tstark acc.

Root Flag
-------------
ppotts shell - Libre Vulnerability
hhogan shell - Vault Credential revealed
Administartor - SharpGPOAbuse to root




Bests,
GWTW

[kILO9892]

tyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyy

[andr0l1]

Cool. Thank you very much.

[defxsec]

[quote="GWTW" pid='438725' fecha='1708407267']
Me gustaría compartirles la Oficina - HTB Writeup. Es el cuadro de gravedad Difícil y hay demasiados pasos para comprender y participar.

Para aquellos que no tienen suficientes 8 créditos, 
puedes ganar 1 crédito por cada respuesta/publicación en las publicaciones del foro y regresar con suficientes créditos para apoyar los esfuerzos.
¡Participa en el foro y disfruta de los hilos!

Bandera de usuario
-------------
Credencial de base de datos web - Joomla. 4.2.7 - CVE-2023-23752
Fuerza bruta de la página web del administrador de Joomla para invertir el shell.
Obtenga la bandera de usuario con tstark acc.

Bandera raíz
-------------
shell ppotts - Vulnerabilidad libre
hhogan shell - Se revela la credencial de Vault
Administrador - SharpGPOAbuse para rootear




mejores,
GWTW
[/cita]

This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: English Only Forum| https://breachforums.rs/Forum-Ban-Appeals if you feel this is incorrect.