[cavour13]

Waiting for it a lot guys! i love bloodhound

[peRd1]

Gitea server is one of the ways to go. The easier and quicker solution is just running python server with the http module.

You just need to create your git folder appropriately, have your entire source code files inside (including .sln file!!!), and watch how your files are pulled out by server. If that's fine, then your good to go.

Then just check the logs when the server builds your project. If there are no errors and still nothing happens, your code is bad. Otherwise, it should work and do your thing (revshell hitting back home?).

[peRd1]

Gitea server is one of the ways to go. The easier and quicker solution is just running python server with the http module.

You just need to create your git folder appropriately, have your entire source code files inside (including .sln file!!!), and watch how your files are pulled out by server. If that's fine, then your good to go.

Then just check the logs when the server builds your project. If there are no errors and still nothing happens, your code is bad. Otherwise, it should work and do your thing (revshell hitting back home?).

Can you tell me please about it more details. I donn't understand how i should make the repo, should i create repo already with a shell or i can use random repo and then when i upload it on server i can somehow upload a shell ?

Create a new C# web console dot6.0 project. Any hello world project is fine. Look into prebuild events. 

Add there your revshell. Copy WHOLE project to your folder. Initialize and setup git folders appropriately, such as: 

git init
git add  .
git commit -m 'project_name'
cd .git
git --bare update-server-info
launch your python webserver with python -m http.server 80

or do the same with gitea.

Also dont forget each time you mess with source files, rerun the git commit command so it refreshes the repo.

[hooneyman]

Could u give me a nudge for root part?.. im confused jeje

[4ip0k]

Could u give me a nudge for root part?.. im confused jeje

As coolhunter123 already wrote:
1) User have privilege to write in the webapp directory;
2) Create a `php reverse shell` beside the index.html, get a shell with user NT local service;
3) Use `FullPowers` tool to expand ur privileges and SeImpersonate system using flag -c to get another reverse shell;
4) Use `GodPotato` tool to PE to NT AUTHORITY\SYSTEM.

[Mia2024]

thanks 

Could u give me a nudge for root part?.. im confused jeje

As coolhunter123 already wrote:
1) User have privilege to write in the webapp directory;
2) Create a `php reverse shell` beside the index.html, get a shell with user NT local service;
3) Use `FullPowers` tool to expand ur privileges and SeImpersonate system using flag -c to get another reverse shell;
4) Use `GodPotato` tool to PE to NT AUTHORITY\SYSTEM.

[livicac188]

How do you use prebuild events revshell? No matter what i use in <PreBuildEvent>cmd</PreBuildEvent> nothing happens, it just builds successfully without errors or response on my listening port

[blade33]

How do you use prebuild events revshell? No matter what i use in <PreBuildEvent>cmd</PreBuildEvent> nothing happens, it just builds successfully without errors or response on my listening port

make sure you commit changes and update it with git --bare update-server-info (inside of .git folder)

[pavka]

Can somebody give a hint for a payload for reverse shell, already got the idea about Pre-build event, but all my reverse shell payloads don't work: I tried call rev_shell.bat (as docs says) and .exe and a couple of powershell one-liners, but whithout success
Would appriciate any help!

[blade33]

Can somebody give a hint for a payload for reverse shell, already got the idea about Pre-build event, but all my reverse shell payloads don't work: I tried call rev_shell.bat (as docs says) and .exe and a couple of powershell one-liners, but whithout success
Would appriciate any help!

try to pull the script from your machine and pipe it over to powershell