[HTB] Lantern
by RedTeamer - Saturday August 17, 2024 at 10:14 AM
Advanced User

Posts: 62
Threads: 8
Joined: Aug 2024
Reputation: -1

#41
08-17-2024, 10:35 PM
(08-17-2024, 10:28 PM)Anaunimans Wrote: we have lfi try get Data.db

or may be this dbstorage.js
Reply
Banned

Posts: 200
Threads: 14
Joined: Apr 2024
Reputation: 17

#42
08-17-2024, 10:37 PM
(08-17-2024, 10:28 PM)Anaunimans Wrote: we have lfi try get Data.db

how u got it ?...
Ban reason:
Asking for rep is not allowed (Permanent)
Reply
Advanced User

Posts: 62
Threads: 8
Joined: Aug 2024
Reputation: -1

#43
08-17-2024, 10:38 PM
(08-17-2024, 10:37 PM)osamy7593 Wrote:
(08-17-2024, 10:28 PM)Anaunimans Wrote: we have lfi try get Data.db

how u got it ?...

/_framework/InternaLantern.dll
Reply
RaidForums
Member
Posts: 2
Threads: 0
Joined: Jul 2024
Reputation: 0

#44
08-17-2024, 10:42 PM
Identified a path
/home/tomas/LanternAdmin/bin/Debug/net6.0/LanternAdmin.dll
from an error message.
I tried to download it through the aforementioned path traversal or loading that module via the admin panel, but neither worked for me
Reply
RaidForums
Member
Posts: 3
Threads: 0
Joined: Jun 2024
Reputation: 0

#45
08-17-2024, 10:46 PM
(08-17-2024, 10:38 PM)rootme1122 Wrote:
(08-17-2024, 10:37 PM)osamy7593 Wrote:
(08-17-2024, 10:28 PM)Anaunimans Wrote: we have lfi try get Data.db

how u got it ?...

/_framework/InternaLantern.dll

Is it in dll ?
Reply
RaidForums
Member
Posts: 107
Threads: 1
Joined: Apr 2024
Reputation: 3

#46
08-17-2024, 10:48 PM (This post was last modified: 08-17-2024, 10:50 PM by jsvensson.)
i'm trying to read FileUpload.dll - maybe there is a way to upload file not to static/images
(08-17-2024, 10:42 PM)carbonzillioxide Wrote: Identified a path
/home/tomas/LanternAdmin/bin/Debug/net6.0/LanternAdmin.dll
from an error message.
I tried to download it through the aforementioned path traversal or loading that module via the admin panel, but neither worked for me

from path traversal it can't be done because www-data doesn't have rights to /home/tomas
Reply
RaidForums
Member
Posts: 11
Threads: 0
Joined: Jul 2024
Reputation: 0

#47
08-17-2024, 11:01 PM
(08-17-2024, 10:48 PM)jsvensson Wrote: i'm trying to read FileUpload.dll - maybe there is a way to upload file not to static/images
(08-17-2024, 10:42 PM)carbonzillioxide Wrote: Identified a path
/home/tomas/LanternAdmin/bin/Debug/net6.0/LanternAdmin.dll
from an error message.
I tried to download it through the aforementioned path traversal or loading that module via the admin panel, but neither worked for me

from path traversal it can't be done because www-data doesn't have rights to /home/tomas

Datadb is probably with the binary. But then, that server is run by tomas, so www-data shouldnt have access to data.db either way.
Reply
Banned

Posts: 36
Threads: 0
Joined: Apr 2024
Reputation: 1

#48
08-17-2024, 11:04 PM
use path traversal for shell..
Ban reason: Leeching | http://breachddyfwvcp4kzccos5oxtdbssmfbp...an-Appeals if you feel this is incorrect. (Permanent)
Reply
Banned

Posts: 200
Threads: 14
Joined: Apr 2024
Reputation: 17

#49
08-17-2024, 11:05 PM
(08-17-2024, 11:04 PM)nomx1337 Wrote: use path traversal for shell..

How u gained the shell?
Ban reason:
Asking for rep is not allowed (Permanent)
Reply
RaidForums
Member
Posts: 13
Threads: 0
Joined: Feb 2024
Reputation: 0

#50
08-17-2024, 11:05 PM
can we have sqli so then we can run shell command using sqlite's .shell utility
Reply


Possibly Related Threads…
Thread Author Replies Views Last Post
  [FREE] 300+ Writeups PDF HackTheBox/HTB premium retired Tamarisk 360 88,710 03-28-2026, 09:28 AM
Last Post: catsweet
  [FREE] HTB-ProLabs APTLABS Just Flags kewlsunny 23 2,348 03-28-2026, 03:30 AM
Last Post: lulaladrow
  [MEGALEAK] HackTheBox ProLabs, Fortress, Endgame - Alchemy, 250 Flags, leak htb-bot htb-bot 87 7,490 03-27-2026, 07:22 PM
Last Post: stn
  HTB Eloquia User and Root Flags - Insane Box 69646B 13 350 03-27-2026, 06:14 PM
Last Post: vlxw
  HTB - ALL Challenges you Stuck in osamy7593 2 646 03-27-2026, 04:24 PM
Last Post: catsweet



 Users browsing this thread: 1 Guest(s)