VIsual Discussion
by cavour13 - Saturday September 30, 2023 at 06:15 PM
#21
(Oct 05, 2023, 02:08 PM)notforothers Wrote: You can either create the repo in github or run gitea or if you are in your local machine serve the .git folder since the box is searching for git repo not your code.
The .git folder acts as git repo.

(Oct 01, 2023, 07:29 PM)peRd1 Wrote:
(Oct 01, 2023, 06:01 PM)lightweightbaby Wrote:
(Oct 01, 2023, 04:33 PM)peRd1 Wrote: Gitea server is one of the ways to go. The easier and quicker solution is just running python server with the http module.

You just need to create your git folder appropriately, have your entire source code files inside (including .sln file!!!), and watch how your files are pulled out by server. If that's fine, then your good to go.

Then just check the logs when the server builds your project. If there are no errors and still nothing happens, your code is bad. Otherwise, it should work and do your thing (revshell hitting back home?).

Can you tell me please about it more details. I donn't understand how i should make the repo, should i create repo already with a shell or i can use random repo and then when i upload it on server i can somehow upload a shell ?
Create a new C# web console dot6.0 project. Any hello world project is fine. Look into prebuild events

Add there your revshell. Copy WHOLE project to your folder. Initialize and setup git folders appropriately, such as: 

git init
git add  .
git commit -m 'project_name'
cd .git
git --bare update-server-info
launch your python webserver with python -m http.server 80

or do the same with gitea.

Also dont forget each time you mess with source files, rerun the git commit command so it refreshes the repo.

Do we need `git --bare update-server-info`, I dont know. But all others above are required.

All the necessary details about exploiting the systems are listed here.

Ok i got it thank you  :')
Reply
#22
I'm still trying to understand what's going on... I don't quite understand the error
Reply
#23
no i can't find any writeup in google
Reply
#24
no i can't find any writeup in google

This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Leeching | http://c66go4clkqodr7tdjfu76jztjs7w7d3fajdeypxn73v4ju3dt7g5yyyd.onion/Forum-Ban-Appeals if you feel this is incorrect.
Reply
#25
(Oct 05, 2023, 02:58 PM)redtail Wrote:
(Oct 05, 2023, 02:08 PM)notforothers Wrote: You can either create the repo in github or run gitea or if you are in your local machine serve the .git folder since the box is searching for git repo not your code.
The .git folder acts as git repo.

(Oct 01, 2023, 07:29 PM)peRd1 Wrote:
(Oct 01, 2023, 06:01 PM)lightweightbaby Wrote:
(Oct 01, 2023, 04:33 PM)peRd1 Wrote: Gitea server is one of the ways to go. The easier and quicker solution is just running python server with the http module.

You just need to create your git folder appropriately, have your entire source code files inside (including .sln file!!!), and watch how your files are pulled out by server. If that's fine, then your good to go.

Then just check the logs when the server builds your project. If there are no errors and still nothing happens, your code is bad. Otherwise, it should work and do your thing (revshell hitting back home?).

Can you tell me please about it more details. I donn't understand how i should make the repo, should i create repo already with a shell or i can use random repo and then when i upload it on server i can somehow upload a shell ?
Create a new C# web console dot6.0 project. Any hello world project is fine. Look into prebuild events

Add there your revshell. Copy WHOLE project to your folder. Initialize and setup git folders appropriately, such as: 

git init
git add  .
git commit -m 'project_name'
cd .git
git --bare update-server-info
launch your python webserver with python -m http.server 80

or do the same with gitea.

Also dont forget each time you mess with source files, rerun the git commit command so it refreshes the repo.

Do we need `git --bare update-server-info`, I dont know. But all others above are required.

All the necessary details about exploiting the systems are listed here.

Yaa but it shows that .sln file does not exists (that's the problem)

Your problem might be, you're serving the folder not the "git repo" . You must set the url for your .git folder or just try using gitea.
Gitea need to be downloaded and setuped. I got problems at first. Running gitea doesnt serve your files as git, it just runs the instance of gitea. Try going to localhost:3000 in browser and you'll see what needs to be done.
Reply
#26
Finally got user.txt, dotnet things are new to me but i learnt some nice stuff Smile
On to the root flag!
Reply
#27
just look here no?
https://hacktheflag.onrender.com/machines/568

This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Spamming | Contact us via http://breachqr3dqbysbq5khaadg5ynnpxn2wrmw5y3rnzesun55l6lkq73yd.onion/misc.php?action=help&hid=27 if you feel this is incorrect.
Reply
#28
i wrote a script to get you a user shell but i cant figure out how to sell it as locked content
Reply
#29
Hi everybody. I tried many web shells to get reverse shell as nt authority\local service PLS any help
Reply
#30
(Oct 07, 2023, 10:42 PM)monkeythefirst Wrote: Hi everybody. I tried many web shells to get reverse shell as nt authority\local service PLS any help

I use metarpreter, msfvenom and msfconsole
upload rev.exe to server and run htt.../upload/shell.php?cmd=c:\pathto\rev.exe
Reply


Possibly Related Threads…
Thread Author Replies Views Last Post
  [MEGALEAK] HackTheBox ProLabs, Fortress, Endgame - Alchemy, 250 Flags, leak htb-bot htb-bot 87 7,935 11 minutes ago
Last Post: char0n1507
Heart [FREE] HackTheBox All Cheatsheets Tamarisk 9 550 13 minutes ago
Last Post: char0n1507
  CBBH Write Ups hiddenhacker 23 6,331 1 hour ago
Last Post: somecrazykid
  [FREE] HackTheBox Academy - CBBH CDSA CPTS All Modules Flags Techtom 26 2,787 1 hour ago
Last Post: Neuromanc3r
  [FREE] CPTS 12 FLAGS pulsebreaker 72 2,201 3 hours ago
Last Post: coolguyaroundyou

Forum Jump:


 Users browsing this forum: 1 Guest(s)