hackthebox magicgardens
by osamy7593 - Friday May 24, 2024 at 11:16 AM
Banned

Posts: 200
Threads: 14
Joined: Apr 2024
Reputation: 17

#1
05-24-2024, 11:16 AM
https://app.hackthebox.com/competitive/5/overview
let's pwn it guys
Ban reason:
Asking for rep is not allowed (Permanent)
Reply
katopia.me
Member
Posts: 201
Threads: 29
Joined: Nov 2023
Reputation: 132

#2
05-24-2024, 12:12 PM (This post was last modified: 05-24-2024, 12:12 PM by macavitysworld.)
“xss-morty” >> “buffer overflow-alex “ >> “pickle deserialization-docker root” >> “escape container-root”

PWNED!
Website
Reply
Banned

Posts: 200
Threads: 14
Joined: Apr 2024
Reputation: 17

#3
05-24-2024, 12:16 PM (This post was last modified: 05-24-2024, 12:31 PM by osamy7593.)
(05-24-2024, 12:12 PM)macavitysworld Wrote: “xss-morty” >> “buffer overflow-alex “ >> “pickle deserialization-docker root” >> “escape container-root”

PWNED!

can u give more details
(05-24-2024, 12:12 PM)macavitysworld Wrote: “xss-morty” >> “buffer overflow-alex “ >> “pickle deserialization-docker root” >> “escape container-root”

PWNED!

what payload for xss
Ban reason:
Asking for rep is not allowed (Permanent)
Reply
Banned

Posts: 200
Threads: 14
Joined: Apr 2024
Reputation: 17

#4
05-24-2024, 11:03 PM
rooted............................
Ban reason:
Asking for rep is not allowed (Permanent)
Reply
RaidForums
Member
Posts: 8
Threads: 0
Joined: May 2024
Reputation: 0

#5
05-29-2024, 02:45 AM
can someone find the workaround for the smtp service? it has been removed from the box
Reply
RaidForums
Member
Posts: 1
Threads: 0
Joined: May 2024
Reputation: 0

#6
06-02-2024, 05:50 AM
(05-24-2024, 12:12 PM)macavitysworld Wrote: “xss-morty” >> “buffer overflow-alex “ >> “pickle deserialization-docker root” >> “escape container-root”

PWNED!

Can you give more details about this
Reply
RaidForums
Member
Posts: 15
Threads: 0
Joined: May 2024
Reputation: 0

#7
06-04-2024, 11:29 AM
(05-29-2024, 02:45 AM)psy00ps1337 Wrote: can someone find the workaround for the smtp service? it has been removed from the box

The box was patched, now there is no unintended ways and you should exploit binary to pwn it.
Reply
RaidForums
Member
Posts: 3
Threads: 0
Joined: Aug 2023
Reputation: 0

#8
06-05-2024, 09:40 PM
Has anyone any idea on how to proceed?? The machine is patched and i would like to complete it again.

Need nudge for foothold, don't know what to do with the web page...
Reply
RaidForums
Member
Posts: 15
Threads: 0
Joined: May 2024
Reputation: 0

#9
06-06-2024, 02:10 PM
(06-05-2024, 09:40 PM)octubrerojo Wrote: Has anyone any idea on how to proceed?? The machine is patched and i would like to complete it again.

Need nudge for foothold, don't know what to do with the web page...

SSRF to get subscription. Then XSS in QR code to steal stuff session. That is web site part.
Reply
RaidForums
Member
Posts: 19
Threads: 0
Joined: Jun 2024
Reputation: 0

#10
06-09-2024, 03:05 PM
(06-06-2024, 02:10 PM)j868K3792 Wrote:
(06-05-2024, 09:40 PM)octubrerojo Wrote: Has anyone any idea on how to proceed?? The machine is patched and i would like to complete it again.

Need nudge for foothold, don't know what to do with the web page...

SSRF to get subscription. Then XSS in QR code to steal stuff session. That is web site part.

Yup!! But of no use.. morty doesn't have the user flag...
Reply


Possibly Related Threads…
Thread Author Replies Views Last Post
  [FREE] 300+ Writeups PDF HackTheBox/HTB premium retired Tamarisk 360 88,710 03-28-2026, 09:28 AM
Last Post: catsweet
  [FREE] HackTheBox Academy - CBBH CDSA CPTS All Modules Flags Techtom 16 2,276 03-28-2026, 03:32 AM
Last Post: lulaladrow
  [FREE] HackTheBox Dante - complete writeup written by Tamarisk Tamarisk 597 88,992 03-27-2026, 10:54 PM
Last Post: w3soul
  [MEGALEAK] HackTheBox ProLabs, Fortress, Endgame - Alchemy, 250 Flags, leak htb-bot htb-bot 87 7,490 03-27-2026, 07:22 PM
Last Post: stn
  [FREE] HackTheBox Academy - CAPE Path Study Techtom 42 4,154 02-05-2026, 03:48 PM
Last Post: Qursan12



 Users browsing this thread: 1 Guest(s)