Temporary Advertisements:
Ad
Ad
Ad
[HTB] Sea - Machine
by RedTeamer - Friday August 9, 2024 at 08:04 PM
(Aug 11, 2024, 10:36 AM)lucifer_devil_003 Wrote: hey how get amay user i have only www-shell.
any one please help me

how you get amay user

su amay
you will be asked for password

also, if you have password already simply run

ssh [email protected]
Reply
(Aug 11, 2024, 02:55 PM)mhsoraa Wrote:
(Aug 11, 2024, 01:05 PM)lucifer_devil_003 Wrote: anyone please tell me how to get root shell.

command injection on port 8080

I still dont get it how do I do it Sad

(Aug 11, 2024, 10:36 AM)lucifer_devil_003 Wrote: hey how get amay user i have only www-shell.
any one please help me

how you get amay user

In amay, go to check the var directory you'll find databse.js cat that and you'll see a hash
Reply
Hi guys, can someone give me the syntax of ssh port forwarding, i used one with ssh -L ... and another with ssh -R and doesn't work. i got bind [.....]: Cannot assign requested address
Reply
(Aug 11, 2024, 10:16 PM)0nce Wrote: Hi guys, can someone give me the syntax of ssh port forwarding, i used one with ssh -L ... and another with ssh -R and doesn't work. i got bind [.....]: Cannot assign requested address

try this: ssh -L 8080:localhost:8080 [email protected]

while session is openned u can see the port 8080 traffic Smile
Reply
any body available! i need help!
Reply
what is the command injection ???i can not use it

This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Leeching | http://c66go4clkqodr7tdjfu76jztjs7w7d3fajdeypxn73v4ju3dt7g5yyyd.onion/Forum-Ban-Appeals if you feel this is incorrect.
Reply
(Aug 12, 2024, 05:39 AM)fuliye Wrote: what is the command injection ???i can not use it

Intecept the log analyzer and inject your command into the log_file= parameter. like this(log_file=;cat+/root/root.txt;id&...)
Tried it with nc but the session wasn't stable.

Or just look up two post before and use that solution.
Reply
i can't do the ssh port forwarding, it always gives errors... can any one help me??
i tried ssh -L 8080:localhost:8080 [email protected]
Huh
Reply
(Aug 11, 2024, 01:05 PM)lucifer_devil_003 Wrote: anyone please tell me how to get root shell.

There are two ways

1st at command injection path run any reverse shell command of your choice while listening on the port you just choset

2nd u can run chmod u+s /bin/bash in burpsuite then on amay session u can run /bin/bash -p to get a root shell

Those two worked for me

(Aug 12, 2024, 08:00 AM)Liy4 Wrote: i can't do the ssh port forwarding, it always gives errors... can any one help me??
i tried ssh -L 8080:localhost:8080 [email protected]
Huh

don't use 8080 again, try a new port

like ssh -L 1234:127.0.0.1:8080 [email protected]

That'll work fine
Reply
What is your methodology for finding theme/bike/README.md? Gobuster and you try gradually after each directories find? Or do you have a command that looks directly away?
Reply


Possibly Related Threads…
Thread Author Replies Views Last Post
  [FREE] 300+ Writeups PDF HackTheBox/HTB premium retired Tamarisk 457 121,792 50 minutes ago
Last Post: jiqmug
  [MEGALEAK] HackTheBox ProLabs, Fortress, Endgame - Alchemy, 250 Flags, leak htb-bot htb-bot 166 34,849 3 hours ago
Last Post: meomeothantai
  CC,CVV,VBV,NON VBV ,DUMPS ,FULLZ,BANK LOGS (FULL INFO) BEST LINKABLES @RICKBUTLER Ballerwailer4G 0 76 7 hours ago
Last Post: Ballerwailer4G
  [FREE] HackTheBox Academy - CBBH CDSA CPTS All Modules Flags Techtom 110 14,314 11 hours ago
Last Post: Kazahk
Heart [FREE] HackTheBox All Cheatsheets Tamarisk 85 11,303 11 hours ago
Last Post: Kazahk

Forum Jump:


 Users browsing this forum: 1 Guest(s)