[0xb137c88eb5]

Any nudge for "method" payload escaping? Tried a lot of payloads, have no idea now

[nonameokie]

Anyone has john's creds? please share PM or reply

[Liliye]

does anyone have john creds, pls PM, have tried a lot but every attempt failed plss

[admin123]

Any nudge for "method" payload escaping? Tried a lot of payloads, have no idea now

for special symbols escaper try this one -> https://onlinestringtools.com/escape-string

[0xb137c88eb5]

Can someone share root compose.yml file? Will gift the rank for that hero 

[lnf02]

Can someone share root compose.yml file? Will gift the rank for that hero 

It's quite simple, the python script checks for some common "flags/options" on docker containers to avoid LPE with docker.
But it's missing some parts...
You have 2 options to make it to root with docker-compose.
- Option 1:

Hidden Content

You must register or login to view this content.

And rooted!

Resource where you can get more information about:
https://docs.docker.com/compose/compose-...e-file-v3/

Cheers! Don't be an script kiddie! Understand the vulnerabilities, then exploit them!


Edit: the code it's not php, but otherwise the format would be fucked up...

[fraudster]

I'm Starting with Cybermonday #hard machine...   we can to put our hints here for help.


22/tcp open  ssh    syn-ack ttl 63
80/tcp open  http    syn-ack ttl 62


in cybermonday.htb/.htacess 

<IfModule mod_rewrite.c>
    <IfModule mod_negotiation.c>
        Options -MultiViews -Indexes
    </IfModule>

    RewriteEngine On

    # Handle Authorization Header
    RewriteCond %{HTTP:Authorization} .
    RewriteRule .* - [E=HTTP_AUTHORIZATION:%{HTTP:Authorization}]

    # Redirect Trailing Slashes If Not A Folder...
    RewriteCond %{REQUEST_FILENAME} !-d
    RewriteCond %{REQUEST_URI} (.+)/$
    RewriteRule ^ %1 [L,R=301]

    # Send Requests To Front Controller...
    RewriteCond %{REQUEST_FILENAME} !-d
    RewriteCond %{REQUEST_FILENAME} !-f
    RewriteRule ^ index.php [L]
</IfModule>


But i think right path is injecting SQL or working with LARAVEL.. i got some errors with laravel console.

ooh intresting

[Tinfoil8124]

this can help me somuch

[Addka72424]

The last non-spam response in the topic was more than a month ago. I close the topic as irrelevant to prevent spam. If this is not the case, please send a pm and I will open the topic for discussion again.