Posts: 22
Threads: 0
Joined: Dec 2023
DouglDoul dateline='[url=tel:1702049957' Wrote: 1702049957[/url]']
terminaluzer dateline='[url=tel:1702045421' Wrote: 1702045421[/url]']
ghostess256 dateline='[url=tel:1702044509' Wrote: 1702044509[/url]']
terminaluzer dateline='[url=tel:1702043513' Wrote: 1702043513[/url]']
ghostess256
dateline='[url=tel:1702043208' Wrote: 1702043208[/url]']
yes I am am also in the CTF
managed to get anything??
working on a machine apethanto but not finding anything yet
i found metabase.apethanto.htb on the source code tried rce
https://github.com/m3m0o/metabase-pre-auth-rce-poc
but this doesnt seem to work
User this instead : hhhttps://github.com/shamo0/CVE-2023-38646-PoC
I tried it but it didn’t work for me. Is apethanto db exploitation is Pre-Auth RCE in metabase (CVE-2023-38646) or something else ?
Posts: 56
Threads: 2
Joined: Aug 2023
Posts: 13
Threads: 0
Joined: Oct 2023
(Dec 09, 2023, 09:00 AM)Jonwi Wrote: DouglDoul dateline='[url=tel:1702049957' Wrote: 1702049957[/url]']
terminaluzer dateline='[url=tel:1702045421' Wrote: 1702045421[/url]']
ghostess256 dateline='[url=tel:1702044509' Wrote: 1702044509[/url]']
terminaluzer dateline='[url=tel:1702043513' Wrote: 1702043513[/url]']
managed to get anything??
working on a machine apethanto but not finding anything yet
i found metabase.apethanto.htb on the source code tried rce
https://github.com/m3m0o/metabase-pre-auth-rce-poc
but this doesnt seem to work
User this instead : hhhttps://github.com/shamo0/CVE-2023-38646-PoC
I tried it but it didn’t work for me. Is apethanto db exploitation is Pre-Auth RCE in metabase (CVE-2023-38646) or something else ?
same, no response
Posts: 1
Threads: 0
Joined: Dec 2023
anyone can help me with BioBundle?
Posts: 2
Threads: 0
Joined: Dec 2023
Dec 09, 2023, 10:50 AM
(This post was last modified: Dec 09, 2023, 10:51 AM by Spiralhe.)
What is this
Try this comment
Posts: 15
Threads: 0
Joined: Nov 2023
(Dec 09, 2023, 01:37 AM)ashur Wrote: Need a hint for Apethanto root plz !
is it kernel exploit? everything else doesn't seems to work
Posts: 2
Threads: 0
Joined: Dec 2023
Can anyone give me a hint to great old talisman (pwn easy challenge) ?
Posts: 45
Threads: 2
Joined: Sep 2023
(Dec 08, 2023, 03:20 PM)ghostess256 Wrote: check your dms
Id also like to know please
Posts: 14
Threads: 0
Joined: Oct 2023
(Dec 09, 2023, 01:37 AM)ashur Wrote: Need a hint for Apethanto root plz !
I tryed dirtypipe exploit, but it gave me nothing.
Posts: 1
Threads: 0
Joined: Sep 2023
(Dec 09, 2023, 01:06 PM)st123 Wrote: (Dec 08, 2023, 03:20 PM)ghostess256 Wrote: check your dms
Id also like to know please
me too, please.
i tried both of 'em and HTB_Analytics_poc, too.
but i'm getting "Malformed JSON in request body" in my burp with first two and db not found with htb py script:
{"message":"Database cannot be found.","errors":{"db":"check your connection string"}}
any suggestions?
|
