HTB Pentest Notes - Challenge
by StingEm - Saturday October 26, 2024 at 09:53 PM
#11
Thanks for sharing!!!!!!
Ban reason: Leeching | http://breachddyfwvcp4kzccos5oxtdbssmfbp...an-Appeals if you feel this is incorrect. (Permanent)
Reply
#12
I was stuck after finding the main vulnerability but couldn't get the proper payload. Thanks for the directions!
Reply
#13
very easy))
* is treat directly, not wildcard
[Image: SP4pD.gif]
htb-bot.mysellix.io

HTB Writeup. Challenge Flag. Exam Solution. CTF Carry.
We are your pentest company selling help to make you good.
Best price, DM if need anything. See anywhere cheaper, DM and we do better.
Reply
#14
im still stuck here "name=';CALL+EXEC('echo "ss" > /tmp/revshell')%3b--" after creat alias
Reply
#15
any idea of how to get the flag?
Reply
#16
Im stuck here name= ' or 1=0; CALL EXECVE('ls'); -- -
Reply
#17
(10-30-2024, 09:45 AM)Art10n Wrote: Use it in the POST and with Burp Suite

I did that but I am getting a `500` error. Someone please help !
Ban reason: Leeching. (Permanent)
Reply
#18
(12-30-2024, 06:32 PM)0xbeef Wrote:
(10-30-2024, 09:45 AM)Art10n Wrote: Use it in the POST and with Burp Suite

I did that but I am getting a `500` error. Someone please help !

You may have already done this... but... 
Usually when that happens during a challenge - and I know all is correct - I reset / STOP the instance and then wait 2 minutes and estart - I usually get another IP and things work as they should. 

I just had to do it on Replace Me and it fixed the issue I was having - 30 minutes of double checking things to find out it was my Instance of the Challenge I was using.

I hope it helps!
Reply
#19
I made a free post of how to do this challenge step by step
Reply
#20
(12-30-2024, 07:41 PM)whare Wrote: I made a free post of how to do this challenge step by step

Just saw it and saw my mistake too, I skipped something in the process

(12-30-2024, 07:27 PM)StingEm Wrote:
(12-30-2024, 06:32 PM)0xbeef Wrote:
(10-30-2024, 09:45 AM)Art10n Wrote: Use it in the POST and with Burp Suite

I did that but I am getting a `500` error. Someone please help !

You may have already done this... but... 
Usually when that happens during a challenge - and I know all is correct - I reset / STOP the instance and then wait 2 minutes and estart - I usually get another IP and things work as they should. 

I just had to do it on Replace Me and it fixed the issue I was having - 30 minutes of double checking things to find out it was my Instance of the Challenge I was using.

I hope it helps!

Thanks for you reply, but I was also missing a step but will think of restarting next time
Ban reason: Leeching. (Permanent)
Reply


Possibly Related Threads…
Thread Author Replies Views Last Post
  [FREE] 300+ Writeups PDF HackTheBox/HTB premium retired Tamarisk 360 88,710 03-28-2026, 09:28 AM
Last Post: catsweet
  [FREE] HTB-ProLabs APTLABS Just Flags kewlsunny 23 2,348 03-28-2026, 03:30 AM
Last Post: lulaladrow
  [MEGALEAK] HackTheBox ProLabs, Fortress, Endgame - Alchemy, 250 Flags, leak htb-bot htb-bot 87 7,490 03-27-2026, 07:22 PM
Last Post: stn
  HTB Eloquia User and Root Flags - Insane Box 69646B 13 350 03-27-2026, 06:14 PM
Last Post: vlxw
  HTB - ALL Challenges you Stuck in osamy7593 2 646 03-27-2026, 04:24 PM
Last Post: catsweet



 Users browsing this thread: 1 Guest(s)