[samfisher010]

so the cap_setuid=eip is a rabbit hole ?doesn't seems to work tho

[peRd1]

/opt/ofbiz/runtime/tmp/AdminUserLoginData.xml
Hi I find current password in here with SHA encrypted
I don't know how to decrypt it, and not sure if it's the right way

Its not possible to decrypt it without knowing the SALT

we know the salt.

but we also need to figure out what apache ofbiz hashcrypt does first ...

[samfisher010]

/opt/ofbiz/runtime/tmp/AdminUserLoginData.xml
Hi I find current password in here with SHA encrypted
I don't know how to decrypt it, and not sure if it's the right way

Its not possible to decrypt it without knowing the SALT

we know the salt.

but we also need to figure out what apache ofbiz hashcrypt does first ...

yoo that path doesn't exist in my machine
/opt/ofbiz/runtime/tmp/AdminUserLoginData.xml

[artifice]

/opt/ofbiz/runtime/tmp/AdminUserLoginData.xml
Hi I find current password in here with SHA encrypted
I don't know how to decrypt it, and not sure if it's the right way

Its not possible to decrypt it without knowing the SALT

we know the salt.

but we also need to figure out what apache ofbiz hashcrypt does first ...

yoo that path doesn't exist in my machine
/opt/ofbiz/runtime/tmp/AdminUserLoginData.xml

try find / -iname AdminUserLoginData.xml 2>/dev/null   mine was in a different folder

[samfisher010]

/opt/ofbiz/runtime/tmp/AdminUserLoginData.xml
Hi I find current password in here with SHA encrypted
I don't know how to decrypt it, and not sure if it's the right way

Its not possible to decrypt it without knowing the SALT

we know the salt.

but we also need to figure out what apache ofbiz hashcrypt does first ...

https://nightlies.apache.org/ofbiz/stabl...Crypt.html

[chillywilly]

rooted \0/

[rorotet]

rooted \0/

drop a hint pls :)

[chillywilly]

derby .dat

[shadow0exe13]

derby .dat

if u dont mind can u tell how did u think of it
feeling stupid not goona lie

[arilea_blackspear]

derby is the DBMS used, my guess is the admin hash in one of the DAT files, crack it then login through the web portal, see whats interesting and go from there. Im too lazy to do anything rn lol.