[chillywilly]

lets goooooo 

hopefully the box starts working off to a rough start
its a node.js box

[blade33]

port 3000 uses vulnerable version of vm2, i were able to run commands but cant get shell

[0nyxsaaa]

interesantttttttt

This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Empty-Quoting | http://c66go4clkqodr7tdjfu76jztjs7w7d3fajdeypxn73v4ju3dt7g5yyyd.onion/Forum-Ban-Appeals if you feel this is incorrect.

[m1lk]

any tips for priv esc

[PADL]

any tips for priv esc

any tips for foothold

[SrDuckMa]

Nmap scan:

22/tcp  open  ssh    syn-ack ttl 63
80/tcp  open  http    syn-ack ttl 63
3000/tcp open  ppp    syn-ack ttl 63

directory scanning:

/about                (Status: 200) [Size: 2921]
/About                (Status: 200) [Size: 2921]
/editor              (Status: 200) [Size: 3123]
/Editor              (Status: 200) [Size: 3123]
/ABOUT                (Status: 200) [Size: 2921]
/limitations          (Status: 200) [Size: 2665]
/server-status        (Status: 403) [Size: 275]

any hint for reverse shell?

[chillywilly]

port 3000 uses vulnerable version of vm2, i were able to run commands but cant get shell

was trying something similar too
https://www.uptycs.com/blog/exploitable-...rabilities
one of them works execute stuff

http://codify.htb/limitations

[z03]

user is easy, just use the poc

[plague]

user is easy, just use the poc

any idea on root anyone?

[chillywilly]

after a little poking around i found a hash