[pavka]

This rev shell worked for me (https://github.com/martinsohn/PowerShell-reverse-shell), and I was able to get the userl flag, but the shell is too slow and unstable, that I can't even enumerate the system properly.
Can somebody plz recommend a better payload for this box? (already tried msfvenom for powershell - didn't work)

[dotio]

How did you get the shell? Including a malicious .sln file that includes the shell code??
Thanks 

GitHub - Miranda-Bai/C_plus: Used for HTB Visual machine practice.

[notforothers]

Thanks a lot, but unfortunately, I keep getting the "the repository does not  contain a .snl file" error...

Faced same problem. Get gitea. Install it properly. And create a repo... You'll get revshell in no time.

---

Could u give me a nudge for root part?.. im confused jeje

As coolhunter123 already wrote:
1) User have privilege to write in the webapp directory;
2) Create a `php reverse shell` beside the index.html, get a shell with user NT local service;
3) Use `FullPowers` tool to expand ur privileges and SeImpersonate system using flag -c to get another reverse shell;
4) Use `GodPotato` tool to PE to NT AUTHORITY\SYSTEM.

It works like a charm when you get the reverse shell. Just stay cool.

Can anybody tell me what are the vuln and why it works though. Please PM me. Love to know the tidbits.

[redtail]

facing problem in gitea setup.. help plz

[morfessa]

i can upload my repository but i cant get my shell
can someone help me ?

[evrohachik]

hi everyone,
what i am doing wrong?

shoud i paste http://myip:8000/repo into submit or http://myip:8000/repo.git ?

i got an error The repository doesn’t contain a .sln file or the URL submitted is invalid.

[haemanth]

does anybody have writeup for this machine ???

[notforothers]

You can either create the repo in github or run gitea or if you are in your local machine serve the .git folder since the box is searching for git repo not your code.
The .git folder acts as git repo.

---

Gitea server is one of the ways to go. The easier and quicker solution is just running python server with the http module.

You just need to create your git folder appropriately, have your entire source code files inside (including .sln file!!!), and watch how your files are pulled out by server. If that's fine, then your good to go.

Then just check the logs when the server builds your project. If there are no errors and still nothing happens, your code is bad. Otherwise, it should work and do your thing (revshell hitting back home?).

Can you tell me please about it more details. I donn't understand how i should make the repo, should i create repo already with a shell or i can use random repo and then when i upload it on server i can somehow upload a shell ?

Create a new C# web console dot6.0 project. Any hello world project is fine. Look into prebuild events. 

Add there your revshell. Copy WHOLE project to your folder. Initialize and setup git folders appropriately, such as: 

git init
git add  .
git commit -m 'project_name'
cd .git
git --bare update-server-info
launch your python webserver with python -m http.server 80

or do the same with gitea.

Also dont forget each time you mess with source files, rerun the git commit command so it refreshes the repo.

Do we need `git --bare update-server-info`, I dont know. But all others above are required.

All the necessary details about exploiting the systems are listed here.

[redtail]

You can either create the repo in github or run gitea or if you are in your local machine serve the .git folder since the box is searching for git repo not your code.
The .git folder acts as git repo.

---

Gitea server is one of the ways to go. The easier and quicker solution is just running python server with the http module.

You just need to create your git folder appropriately, have your entire source code files inside (including .sln file!!!), and watch how your files are pulled out by server. If that's fine, then your good to go.

Then just check the logs when the server builds your project. If there are no errors and still nothing happens, your code is bad. Otherwise, it should work and do your thing (revshell hitting back home?).

Can you tell me please about it more details. I donn't understand how i should make the repo, should i create repo already with a shell or i can use random repo and then when i upload it on server i can somehow upload a shell ?

Create a new C# web console dot6.0 project. Any hello world project is fine. Look into prebuild events. 

Add there your revshell. Copy WHOLE project to your folder. Initialize and setup git folders appropriately, such as: 

git init
git add  .
git commit -m 'project_name'
cd .git
git --bare update-server-info
launch your python webserver with python -m http.server 80

or do the same with gitea.

Also dont forget each time you mess with source files, rerun the git commit command so it refreshes the repo.

Do we need `git --bare update-server-info`, I dont know. But all others above are required.

All the necessary details about exploiting the systems are listed here.

Yaa but it shows that .sln file does not exists (that's the problem)

[evrohachik]

does anybody have writeup for this machine ???

yes google