[Writeuphtb]

This is a complete writeup or no??

[blackheartcrow]

This is a complete writeup or no??

No, it fails at step 1 cause the credentials aren't the defaults anymore. so you cant follow any of the steps without finding a way to log in first.

[yshmfhl]

I am lucky to have read this article, it is very useful

[akorshikai]

You can read the changelog from HTB that they patched the default creds shortly after release. That made the box a lot more difficult than just exploiting via SQLi.

[Venom1232024]

nice for sharing dude

This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Leeching | http://c66go4clkqodr7tdjfu76jztjs7w7d3fajdeypxn73v4ju3dt7g5yyyd.onion/Forum-Ban-Appeals if you feel this is incorrect.

[BlackBeer]

No, it fails at step 1 cause the credentials aren't the defaults anymore. so you cant follow any of the steps without finding a way to log in first.

Do you know how to log in now?
I tried password spraying, but nothing so far.

[blackheartcrow]

No, it fails at step 1 cause the credentials aren't the defaults anymore. so you cant follow any of the steps without finding a way to log in first.

Do you know how to log in now?
I tried password spraying, but nothing so far.

 
I do not know, but it is not the intended path, the intended path is to find Margo's credentials in the gitbucket. then use X-Forwarded Host and XSS to capture an admin cookie to get an SSH id_ecdsa from the logs section of the first web page. Though i've been struggling on capturing the Admin cookie, so i stepped away for a bit to do other things, I got a full writeup from a different thread, but it doesnt give details on how to get the admin cookie, just says "capture an admin cookie through XSS" and then moves to the next step. I'll figure it out later though. been focusing more on the season 7 machines right now

[HRS4156453]

thanks for sharing i was stuck in this for hours... XD

[ahmadwaqar]

Thank you for the share brother!

This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Leeching.

[chamo20]

Thanks bro for shared this article....