[jsvensson]

If anyone stuck on this xss
admin cookie eyJ1c2VyX2lkIjogNiwgInVzZXJuYW1lIjogIjEyMzQiLCAicm9sZSI6ICJ1c2VyIn18NTQ5ZGU5NjRjY2NlOGE4NDI4ZTA0ZGMwNzU2ZGE4YmI5NzA1ODlkOTEzYjI0Y2Y5OGZlYTliNzM3Y2E3ZjY5NA==
try it if it works move on to http://dashboard.comprezzor.htb/create_pdf_report

i HAVE THE COOKIE BUT HOW TO ACCESS THE DASHBOARD url it redirects me to the login page not able to use the cookie to log in

cookie from that post isn't cookie for admin user,
to go to  http://dashboard.comprezzor.htb/create_pdf_report you need to steal admin cookie

[DrBan]

Access to dashboard with stolen cookie from webdev adam.
Can't crack his hash, and don't see anything exploitable in the /report /delete /resolve /backup or /change_priority endpoints yet.
Anyone have anything?

HI, 
I have the stolen cookie from webdav admin but unable to access the dashboard any help

[trevor69000]

So to get user 
1) register on http://report.comprezzor.htb/
2) login with those creds 
3) then get the admin cookies = eyJ1c2VyX2lkIjogMSwgInVzZXJuYW1lIjogImFkbWluIiwgInJvbGUiOiAiYWRtaW4ifXwzNDgyMjMzM2Q0NDRhZTBlNDAyMmY2Y2M2NzlhYzlkMjZkMWQxZDY4MmM1OWM2MWNmYmVhMjlkNzc2ZDU4OWQ5
4) using the cookie go to http://dashboard.comprezzor.htb/create_pdf_report
5) there you perform ssrf 
6) provided the pass for people who dont know for user only

Hidden Content

You must register or login to view this content.

---

[nomx1337]

What username did you use to ssh with private key?

This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Leeching | http://c66go4clkqodr7tdjfu76jztjs7w7d3fajdeypxn73v4ju3dt7g5yyyd.onion/Forum-Ban-Appeals if you feel this is incorrect.

[vanatka123]

Did I miss something? I have the key,pass and i guess user is root but can't connect

try using ssh-add and then you'll know something

[osamy7593]

Root hint ?............

This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Asking for rep is not allowed

[trevor69000]

What username did you use to ssh with private key?

use ssh-keygen -p -P "the phrase you get " -N "new pass" ......

[jsvensson]

someone hint for root? there is selenium grid 4.19.1 on local 4444 port and python werkzeug on local 8080 port

[nomx1337]

What username did you use to ssh with private key?

use ssh-keygen -p -P "the phrase you get " -N "new pass" ......

I used ssh-keygen -p -N "" -m pem -f id_rsa

now i have a rsa private key without password but i dont know what username to use

This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Leeching | http://c66go4clkqodr7tdjfu76jztjs7w7d3fajdeypxn73v4ju3dt7g5yyyd.onion/Forum-Ban-Appeals if you feel this is incorrect.

[hexacor]

Access to dashboard with stolen cookie from webdev adam.
Can't crack his hash, and don't see anything exploitable in the /report /delete /resolve /backup or /change_priority endpoints yet.
Anyone have anything?

HI, 
I have the stolen cookie from webdav admin but unable to access the dashboard any help

Use the same way to to call create_pdf_report and setup listener netcat to get the cookie