[batti]

I need writeup for Alchemy Pro lab pls
Telegram: @xchabic

[imran888]

Guys, how you login to .4? apparently people use the credentials from the PDF, but I cannot login with them

[me1476]

Guys, how you login to .4? apparently people use the credentials from the PDF, but I cannot log in with them

Creds from PDFs should work. Maybe try to switch to a different server?

[imran888]

Guys, how you login to .4? apparently people use the credentials from the PDF, but I cannot log in with them

Creds from PDFs should work. Maybe try to switch to a different server?

Thanks man. Let me try another host. Just to confirm something. The banner is AutomateX, is this correct?

[moonwalk8697]

Guys, how you login to .4? apparently people use the credentials from the PDF, but I cannot log in with them

Creds from PDFs should work. Maybe try to switch to a different server?

Thanks man. Let me try another host. Just to confirm something. The banner is AutomateX, is this correct?

Banner is correct. To be clear, the PDF with user creds is obtained from PRINTER. The PLC Documentation from EW is useful in other ways, I think.

[loveofgodpleasework]

Just bought prolabs and going to start this after dante. Will see how far i can go.

[HTBcracker]

if anyone still reading this thread and have the write up for Alchemy with the PLC part, i'm willing to pay with 20-50 credit (roughly the amount of credit the VIP or MVP rank will get you) depend on the write up quality via the donate function

DM is open if anyone is interested

This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Malware. /Thread-Shellter-Pro-v4-7-x86-NOT-WORKING-crack

[loveofgodpleasework]

Currently I have 4 plcs remaining, currently very stuck in the following ones if anyone could give hints/help

Conditioning PLC

I have been able to interact with different slaves, understood the logic in the st files, but failed to trigger anything. Especially the timer logic. I set the timer count to very less but still the .Q doesn't trigger.

Bottle filling PLC

Completely stuck, i know that i have to commit dos from the changelog, but i am unable to cause any changes to the logic at all.

[test123blank]

from my initial scan:

Nmap scan report for 10.10.110.1
Host is up (0.085s latency).
Nmap scan report for 10.10.110.21
Host is up (0.089s latency).
Nmap scan report for 10.10.110.100
Host is up (0.094s latency).

---

more detailed scan:

nmap -sC -sV -p- --min-rate=1000 -oN nmap_mass_scan 10.10.110.1
Nmap scan report for 10.10.110.1                                                                                     
Host is up (0.084s latency).                                                                                         
Not shown: 65533 filtered tcp ports (no-response)                                                                   
PORT    STATE SERVICE  VERSION                                                                                       
22/tcp  open  ssh      OpenSSH 9.4 (protocol 2.0)                                                                   
443/tcp open  ssl/http nginx                                                                                         
|_http-title: pfSense - Login                                                                                       
|_ssl-date: TLS randomness does not represent time                                                                   
| tls-alpn:                                                                                                         
|  h2                                                                                                               
|  http/1.1                                                                                                         
|  http/1.0                                                                                                         
|_  http/0.9                                                                                                         
| ssl-cert: Subject: commonName=pfSense-646b882d43d57/organizationName=pfSense webConfigurator Self-Signed Certificate
| Subject Alternative Name: DNS:pfSense-646b882d43d57                                                               
| Not valid before: 2023-05-22T15:20:13                                                                             
|_Not valid after:  2024-06-23T15:20:13


nmap -sC -sV -p- --min-rate=1000 -oN nmap_mass_scan 10.10.110.21
Nmap scan report for 10.10.110.21                                                                                   
Host is up (0.083s latency).                                                                                         
Not shown: 65532 closed tcp ports (conn-refused)                                                                     
PORT    STATE SERVICE VERSION                                                                                       
22/tcp  open  ssh    OpenSSH 7.6p1 Ubuntu 4ubuntu0.5 (Ubuntu Linux; protocol 2.0)
| ssh-hostkey:                                                                                                       
|  2048 02b6ea1a7433807a8217bb9e4bf937d1 (RSA)                                                                     
|  256 fa8084a2e43a2d1f8a9b236e018edabe (ECDSA)                                                                     
|_  256 a42fd94584880f230fa197ff43b1c323 (ED25519)                                                                   
80/tcp  open  http    Rocket                                                                                       
| fingerprint-strings:                                                                                               
|  FourOhFourRequest, HTTPOptions:                                                                                 
|    HTTP/1.0 404 Not Found                                                                                         
|    content-type: text/plain; charset=utf-8                                                                       
...SNIP...                                               
|    HTTP/1.1 400 Bad Request                                                                                       
|    content-length: 0                                                                                             
|_    date: Mon, 23 Sep 2024 17:26:17 GMT                                                                           
|_http-title: Index - Sogard Brewing Co                                                                             
|_http-server-header: Rocket                                                                                         
3000/tcp open  ppp?                                                                                                 
| fingerprint-strings:
...SNIP...


nmap -sC -sV -p- --min-rate=1000 -oN nmap_mass_scan 10.10.110.100
Warning: 10.10.110.100 giving up on port because retransmission cap hit (10).
Nmap scan report for 10.10.110.100
Host is up (0.091s latency).
Not shown: 59212 closed tcp ports (conn-refused), 6321 filtered tcp ports (no-response)
PORT    STATE SERVICE  VERSION
22/tcp  open  ssh      OpenSSH 8.4p1 Debian 5+deb11u3 (protocol 2.0)
| ssh-hostkey:
|  3072 9a8707c6bfb12a17ed3ef183a70682f8 (RSA)
|  256 b29ba6047521490d899d31f3e1f2280b (ECDSA)
|_  256 7ffc433425548b3ea768f73fd83c4972 (ED25519)
1194/tcp open  openvpn?
Service Info: OS: Linux; CPE: cpe:/o:linux:linux_kernel

@http://10.10.110.21:3000 there is Gogs instance with some users as well

Thanks for sharing