[nomx1337]

Were you able to crack adams hash?

[nitwitse]

Were you able to crack adams hash?

Yep, but I was running hashcat for at least 20 min before it turned up over halfway through my wordlist...

[jsvensson]

for POC
there is a couple of things to change:
in zip you have a.php - need a change to yours ip to get shell - but this file must be in zip
in exploit.py - change name of shell.php to /themes/next/a.php
in exploit html:
all admin-dev to admin634ewutrx1jgitlooaj
and in import_theme to yours_ip

[a44857437]

Were you able to crack adams hash?

I cracked james' hash from the database

---

for POC
there is a couple of things to change:
in zip you have a.php - need a change to yours ip to get shell - but this file must be in zip
in exploit.py - change name of shell.php to /themes/next/a.php
in exploit html:
all admin-dev to admin634ewutrx1jgitlooaj
and in import_theme to yours_ip

I had to change the call to reverse_shell.php in exploit.html to a.php as well
(or you can add the modified reverse_shell.php to the zip)

[Leonzola]

james@trickster.htb

pass: alwaysandforever

[Art10n]

james@trickster.htb

pass: alwaysandforever

how can I fand this password ?

[osamy7593]

james@trickster.htb

pass: alwaysandforever

where u found DB creds

[wtfduw]

You can find db creds under /var/www/prestashop/app/config/parameters.php
connect to mysql
use prestashop
select * from ps_employee;
crack james hash => password:alwaysandforever

Anyone has path for root?

[osamy7593]

You can find db creds under /var/www/prestashop/app/config/parameters.php
connect to mysql
use prestashop
select * from ps_customer;
crack james hash => password:alwaysandforever

Anyone has path for root?

thx budd ................

[nomx1337]

There is no james, just adam in my db (tried to crack the pw for 30min and it's not the same as james)
Are there different box setups?