[defxsec]

tengo este hash
c81dde783f9543114ecd9fa14e8440a2a868bfe0bacdf14d29fce0605c09d5a2bcd2028d0d7a3fa805573d074faa15d6361f44aec9a6efe18b754b3c265ce81e

This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: English Only Forum| https://breached.hn/Forum-Ban-Appeals if you feel this is incorrect.

[xxxbfacc]

Upload files to C:\xampp\htdocs to bypass execution restrictions.

[kimera]

http://mist.htb/admin.php?action=start

https://github.com/Jacky-Y/vuls/blob/main/vul2.md

[Darkhazel]

sorry for my ignorance, but how do we get a revshell from svc_web ? there's an antivirus blocked my revshell

This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Leeching | http://c66go4clkqodr7tdjfu76jztjs7w7d3fajdeypxn73v4ju3dt7g5yyyd.onion/Forum-Ban-Appeals if you feel this is incorrect.

[jahman]

sorry for my ignorance, but how do we get a revshell from svc_web ? there's an antivirus blocked my revshell

Hello,

Bypassing the microsoft windows defender is not rocket science. You need to execute your payload "just in memory"

Here is a good blogpost that explain how to do it.  https://www.praetorian.com/blog/running-...terpreter/

[xxxbfacc]

Seeing as the last couple posters missed.
If you put your shell in c:\xampp\htdocs you can run it. There is a bypass in place on that directory.

So anyone notice that other thing yet?

[R47]

Upload files to C:\xampp\htdocs to bypass execution restrictions.

Did you manage to make a lateral move?

This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Leeching | http://c66go4clkqodr7tdjfu76jztjs7w7d3fajdeypxn73v4ju3dt7g5yyyd.onion/Forum-Ban-Appeals if you feel this is incorrect.

[0xf]

---

plz why can't i get http://mist.htb although 80 is open udp  in my scan

Try Using Different VPN it's unstable from the starting (Are you a free User)

[jahman]

Seeing as the last couple posters missed.
If you put your shell in c:\xampp\htdocs you can run it. There is a bypass in place on that directory.

So anyone notice that other thing yet?

with a "netstat -ano -p tcp" command, you can observe that smb connection is made to the  192.168.100.100 ip address
...
  TCP    192.168.100.101:60101  192.168.100.100:445    ESTABLISHED    4
...

i think that we need to lateralize our first revshell

[defxsec]

C:\xampp\htdocs\data\modules>dir
Volume in drive C has no label.
Volume Serial Number is 560D-8100

Directory of C:\xampp\htdocs\data\modules

03/30/2024 05:08 PM <DIR> .
03/30/2024 05:06 PM <DIR> ..
02/24/2023 03:55 AM 1 .htaccess
03/30/2024 05:06 PM <DIR> albums
03/30/2024 05:06 PM <DIR> blog
03/30/2024 05:06 PM <DIR> contactform
03/30/2024 05:06 PM <DIR> multitheme
03/30/2024 05:08 PM <DIR> test
03/30/2024 05:06 PM <DIR> tinymce
03/30/2024 05:06 PM <DIR> viewsite
1 File(s) 1 bytes
9 Dir(s) 11,347,357,696 bytes free

This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: English Only Forum| https://breached.hn/Forum-Ban-Appeals if you feel this is incorrect.