[RedBlock]

http://underpass.htb/daloradius/app/oper...e-main.php

daloradius/app/operators/home-main.php

administrator:radius

Yes and from config db creds:

steve:testing123

-------------------FOUND----------
on http://10.129.52.94/daloradius/app/opera...st-all.php

svcMosh hash, crack it and ssh in for User.txt


Hash Crack = underwaterfriends

how you found hash?

hash is here
http://10.10.xx.xx/daloradius/app/operat...st-all.php

[StingEm]

Finish to Root at:

https://breachforums.rs/Thread-Underpass...#pid983250

-----
That was fun and its all here to follow - so don't let someone take your credits. You all got this!

[0xdaniii]

http://underpass.htb/daloradius/app/oper...e-main.php

daloradius/app/operators/home-main.php

administrator:radius

Yes and from config db creds:

steve:testing123

-------------------FOUND----------
on http://10.129.52.94/daloradius/app/opera...st-all.php

svcMosh hash, crack it and ssh in for User.txt


Hash Crack = underwaterfriends

how you found hash?

hash is here
http://10.10.xx.xx/daloradius/app/operat...st-all.php

yeah i got it thanks buddy

[sabiri]

i had a hard time for this machine so yeah thankss

This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Leeching | http://c66go4clkqodr7tdjfu76jztjs7w7d3fajdeypxn73v4ju3dt7g5yyyd.onion/Forum-Ban-Appeals if you feel this is incorrect.

[hackemall]

Hidden Content

You must register or login to view this content.

---

root id_rsa only

This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Leeching | http://c66go4clkqodr7tdjfu76jztjs7w7d3fajdeypxn73v4ju3dt7g5yyyd.onion/Forum-Ban-Appeals if you feel this is incorrect.

[RandomUser420]

UDP Nmap scan > snmpwalk > feroxbuster with the directory found from one of the strings > default creds on login page > Find hash in daloradius/app/operators/mng-list-all.php > Crack hash and SSH in > sudo /usr/bin/mosh-server > Read the manual page for mosh-server > MOSH_KEY=XXXXXXX mosh-client 127.0.0.1 6000X > Root.
Just a few simple steps, can finish this box quickly

This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Leeching | http://c66go4clkqodr7tdjfu76jztjs7w7d3fajdeypxn73v4ju3dt7g5yyyd.onion/Forum-Ban-Appeals if you feel this is incorrect.

[xianling88]

Yeah, this is really a simple easy box if you look carefully into the information revealed by snmp tool.

[applecdos504]

awesome. works like a charm.
mosh --server="sudo /usr/bin/mosh-server" localhost

From docs
https://linux.die.net/man/1/mosh

Its also possible to connect as Ritualist says

[yshmfhl]

I want to study the blogger's articles carefully

[Kenshi]

fun ways to learn new things keep it up guys

This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Leeching | http://c66go4clkqodr7tdjfu76jztjs7w7d3fajdeypxn73v4ju3dt7g5yyyd.onion/Forum-Ban-Appeals if you feel this is incorrect.