[RedBlock]

This one will be Windows Medium Box.

[RedBlock]

10 minutes to go!!!

[kyakeiuwu]

Nmap Scan:

PORT    STATE SERVICE      VERSION
22/tcp  open  ssh          OpenSSH for_Windows_9.5 (protocol 2.0)
53/tcp  open  domain        Simple DNS Plus
80/tcp  open  http          Apache httpd 2.4.58 (OpenSSL/3.1.3 PHP/8.2.12)
|_http-title: Did not follow redirect to http://frizzdc.frizz.htb/home/
88/tcp  open  kerberos-sec  Microsoft Windows Kerberos (server time: 2025-03-16 02:01:11Z)
135/tcp  open  msrpc        Microsoft Windows RPC
139/tcp  open  netbios-ssn  Microsoft Windows netbios-ssn
389/tcp  open  ldap          Microsoft Windows Active Directory LDAP (Domain: frizz.htb0., Site: Default-First-Site-Name)
445/tcp  open  microsoft-ds?
464/tcp  open  kpasswd5?
593/tcp  open  ncacn_http    Microsoft Windows RPC over HTTP 1.0
636/tcp  open  tcpwrapped
3268/tcp open  ldap          Microsoft Windows Active Directory LDAP (Domain: frizz.htb0., Site: Default-First-Site-Name)
3269/tcp open  tcpwrapped
Service Info: Hosts: localhost, FRIZZDC; OS: Windows; CPE: cpe:/o:microsoft:windows

---

http://frizzdc.frizz.htb/Gibbon-LMS/index.php?q=

Vulnerable to LFI

[wh1t3_r4bb1t]

CVE-2024-24725 - https://www.exploit-db.com/exploits/51903.
Should find credentials for Gibbon LMS.

[potato_moose]

http://frizzdc.frizz.htb/Gibbon-LMS/?q=gibbon.sql

Due to unplanned Pentesting by students, WES is migrating applications and tools to stronger security protocols. During this transition, Ms. Fiona Frizzle will be migrating Gibbon to utilize our Azure Active Directory SSO. Please note this might take 48 hours where your accounts will not be available. Please bear with us, and thank you for your patience. Anything that can not utilize Azure AD will use the strongest available protocols such as Kerberos.

[pop10189]

from kerbroas [email protected]

[Phoka]

from kerbroas [email protected]

i got it here 


*NOTICE** Due to unplanned Pentesting by students, WES is migrating applications and tools to stronger security protocols. During this transition, Ms. Fiona Frizzle will be migrating Gibbon to utilize our Azure Active Directory SSO. Please note this might take 48 hours where your accounts will not be available. Please bear with us, and thank you for your patience. Anything that can not utilize Azure AD will use the strongest available protocols such as Kerberos.

During this transition, Ms. Fiona Frizzle will be migrating Gibbon

see Fiona Frizzle = F.Frizzle  so the @Frizz.htb you already know it 
*NOTICE** Due to unplanned Pentesting by students, WES is migrating applications and tools to stronger security protocols. During this transition, Ms. Fiona Frizzle will be migrating Gibbon to utilize our Azure Active Directory SSO. Please note this might take 48 hours where your accounts will not be available. Please bear with us, and thank you for your patience. Anything that can not utilize Azure AD will use the strongest available protocols such as Kerber

[Adith19051905]

what is wrong with my connection? i cant ping nor nmap 22 or any other ports?

[Phoka]

what is wrong with my connection? i cant ping nor nmap 22 or any other ports?

check your openVPN connection or change vpn 

or reather reset machine

[wh1t3_r4bb1t]

Interesting files from LFI:

./export.php [Status: 403, Size: 0, Words: 1, Lines: 1, Duration: 519ms]
./privacyPolicy.php [Status: 200, Size: 18991, Words: 7548, Lines: 322, Duration: 2383ms]
./roleSwitcherProcess.php [Status: 302, Size: 0, Words: 1, Lines: 1, Duration: 2997ms]
./gibbon.sql [Status: 200, Size: 511704, Words: 54887, Lines: 8962, Duration: 2001ms]
./notificationsActionProcess.php [Status: 302, Size: 0, Words: 1, Lines: 1, Duration: 3418ms]
./login.php [Status: 302, Size: 0, Words: 1, Lines: 1, Duration: 3470ms]
./passwordReset.php [Status: 200, Size: 22782, Words: 9545, Lines: 399, Duration: 3377ms]
./composer.json [Status: 200, Size: 21471, Words: 8180, Lines: 406, Duration: 3432ms]
./yearSwitcherProcess.php [Status: 302, Size: 0, Words: 1, Lines: 1, Duration: 3803ms]
./index_parentPhotoUploadProcess.php [Status: 302, Size: 0, Words: 1, Lines: 1, Duration: 3961ms]
./robots.txt [Status: 200, Size: 18547, Words: 7362, Lines: 319, Duration: 3937ms]
./notificationsDeleteProcess.php [Status: 302, Size: 0, Words: 1, Lines: 1, Duration: 4057ms]
./error.php [Status: 200, Size: 21336, Words: 8128, Lines: 368, Duration: 4001ms]
./index_notification_ajax_alarm_tickUpdate.php [Status: 200, Size: 0, Words: 1, Lines: 1, Duration: 1177ms]
./LICENSE [Status: 200, Size: 53600, Words: 13171, Lines: 989, Duration: 4003ms]
./.htaccess [Status: 200, Size: 19125, Words: 7441, Lines: 338, Duration: 1711ms]
./README.md [Status: 200, Size: 21375, Words: 7649, Lines: 357, Duration: 4172ms]
./functions.php [Status: 500, Size: 2845, Words: 771, Lines: 54, Duration: 846ms]
./report.php [Status: 200, Size: 23280, Words: 8738, Lines: 383, Duration: 996ms]
./index_fastFinder_ajax.php [Status: 200, Size: 80, Words: 16, Lines: 1, Duration: 913ms]
./composer.lock [Status: 200, Size: 312852, Words: 132641, Lines: 8420, Duration: 4049ms]
./update.php [Status: 200, Size: 19153, Words: 7399, Lines: 331, Duration: 4465ms]
./CHANGELOG.txt [Status: 200, Size: 121522, Words: 30030, Lines: 1772, Duration: 1097ms]
./gibbon_demo.sql [Status: 200, Size: 1272976, Words: 61546, Lines: 11922, Duration: 1047ms]
./fullscreen.php [Status: 500, Size: 2845, Words: 771, Lines: 54, Duration: 6673ms]