08-06-2023, 10:38 AM
Someone on Download? Found something useful as a potential direction?
|
HTB Download
by WurumDurum - Sunday August 6, 2023 at 10:38 AM
|
|
08-06-2023, 10:38 AM
Someone on Download? Found something useful as a potential direction?
08-06-2023, 05:09 PM
i got an hint about prototype pollution. but i dont know much about it so still trying
08-06-2023, 05:33 PM
You want to use this: https://github.com/DigitalInterruption/cookie-monster
Ban reason: Spamming | Contact us via http://raiddfzn73ir6iyxlf7nwytnujiflddog...on/contact if you feel this is incorrect. (Permanent)
08-06-2023, 06:18 PM
Trying to enumerate the admin creds ..{id = 1, username= "admin"}.., inject it through the cookie and upload into his Panel
08-06-2023, 07:25 PM
08-06-2023, 07:27 PM
08-06-2023, 08:27 PM
(08-06-2023, 08:11 PM)ByteBuster Wrote:(08-06-2023, 07:25 PM)DataNinja Wrote:(08-06-2023, 07:18 PM)hooneyman Wrote: Some hints for root? when you connect to the postgres server if you check the privileges you have the pg_write_server_files role and can copy files as postgres and for example you can copy the /bin/bash file and give it suid permissions and be able to access as postgres user check this https://book.hacktricks.xyz/network-serv...le-writing
08-07-2023, 04:13 PM
update on root from postgres?
08-07-2023, 05:25 PM
(08-07-2023, 05:22 PM)0001 Wrote:(08-06-2023, 05:33 PM)cutty Wrote: You want to use this: https://github.com/DigitalInterruption/cookie-monster try using node v8.17, it runs fine with that (08-07-2023, 05:22 PM)0001 Wrote:(08-06-2023, 05:33 PM)cutty Wrote: You want to use this: https://github.com/DigitalInterruption/cookie-monster open `/cookie-monster/bin/` and run in terminal ./cookie-monster.js |
|
« Next Oldest | Next Newest »
|
| Possibly Related Threads… | |||||
| Thread | Author | Replies | Views | Last Post | |
| [FREE] 300+ Writeups PDF HackTheBox/HTB premium retired | 365 | 113,287 |
Yesterday, 07:30 PM Last Post: |
||
| HTB Eloquia User and Root Flags - Insane Box | 14 | 17,574 |
08-21-2026, 07:27 PM Last Post: |
||
| [MEGALEAK] HackTheBox ProLabs, Fortress, Endgame - Alchemy, 250 Flags, leak htb-bot | 94 | 26,189 |
08-21-2026, 06:20 AM Last Post: |
||
| [FREE] HTB-ProLabs APTLABS Just Flags | 25 | 19,465 |
08-15-2026, 06:06 PM Last Post: |
||
| HTB - ALL Challenges you Stuck in | 3 | 17,620 |
08-15-2026, 01:58 AM Last Post: |
||