Posts: 4
Threads: 0
Joined: Aug 2024
(Aug 11, 2024, 10:36 AM)lucifer_devil_003 Wrote: hey how get amay user i have only www-shell.
any one please help me
how you get amay user
su amay
you will be asked for password
also, if you have password already simply run
ssh [email protected]
Posts: 1
Threads: 0
Joined: Aug 2024
Aug 11, 2024, 09:30 PM
(This post was last modified: Aug 11, 2024, 09:33 PM by maq786.)
(Aug 11, 2024, 02:55 PM)mhsoraa Wrote: (Aug 11, 2024, 01:05 PM)lucifer_devil_003 Wrote: anyone please tell me how to get root shell.
command injection on port 8080
I still dont get it how do I do it
(Aug 11, 2024, 10:36 AM)lucifer_devil_003 Wrote: hey how get amay user i have only www-shell.
any one please help me
how you get amay user
In amay, go to check the var directory you'll find databse.js cat that and you'll see a hash
Posts: 4
Threads: 1
Joined: Jun 2024
Hi guys, can someone give me the syntax of ssh port forwarding, i used one with ssh -L ... and another with ssh -R and doesn't work. i got bind [.....]: Cannot assign requested address
Posts: 1
Threads: 0
Joined: Aug 2024
(Aug 11, 2024, 10:16 PM)0nce Wrote: Hi guys, can someone give me the syntax of ssh port forwarding, i used one with ssh -L ... and another with ssh -R and doesn't work. i got bind [.....]: Cannot assign requested address
try this: ssh -L 8080:localhost:8080 [email protected]
while session is openned u can see the port 8080 traffic
Posts: 1
Threads: 0
Joined: Aug 2024
any body available! i need help!
Posts: 101
Threads: 1
Joined: Nov 2023
what is the command injection ???i can not use it This forum account is currently banned. Ban Length: Permanent (N/A Remaining) Ban Reason: Leeching | http://c66go4clkqodr7tdjfu76jztjs7w7d3fajdeypxn73v4ju3dt7g5yyyd.onion/Forum-Ban-Appeals if you feel this is incorrect.
Posts: 10
Threads: 0
Joined: Apr 2024
(Aug 12, 2024, 05:39 AM)fuliye Wrote: what is the command injection ???i can not use it
Intecept the log analyzer and inject your command into the log_file= parameter. like this(log_file=;cat+/root/root.txt;id&...)
Tried it with nc but the session wasn't stable.
Or just look up two post before and use that solution.
Posts: 30
Threads: 2
Joined: Apr 2024
i can't do the ssh port forwarding, it always gives errors... can any one help me??
i tried ssh -L 8080:localhost:8080 [email protected]
Posts: 59
Threads: 1
Joined: Jun 2024
Aug 12, 2024, 08:44 AM
(This post was last modified: Aug 12, 2024, 08:46 AM by 4rrows.)
(Aug 11, 2024, 01:05 PM)lucifer_devil_003 Wrote: anyone please tell me how to get root shell.
There are two ways
1st at command injection path run any reverse shell command of your choice while listening on the port you just choset
2nd u can run chmod u+s /bin/bash in burpsuite then on amay session u can run /bin/bash -p to get a root shell
Those two worked for me
(Aug 12, 2024, 08:00 AM)Liy4 Wrote: i can't do the ssh port forwarding, it always gives errors... can any one help me??
i tried ssh -L 8080:localhost:8080 [email protected]

don't use 8080 again, try a new port
like ssh -L 1234:127.0.0.1:8080 [email protected]
That'll work fine
Posts: 10
Threads: 0
Joined: Aug 2024
What is your methodology for finding theme/bike/README.md? Gobuster and you try gradually after each directories find? Or do you have a command that looks directly away?
|