04-27-2024, 06:46 PM
|
HTB- Intuition
by trevor69000 - Saturday April 27, 2024 at 06:46 PM
|
|
04-27-2024, 07:02 PM
Good luck & have fun everyone
04-27-2024, 07:04 PM
(This post was last modified: 04-27-2024, 07:25 PM by asdfmonster.)
Open 22
Open 80 comprezzor.htb
04-27-2024, 07:12 PM
found sub domains
report.comprezzor.htb auth.comprezzor.htb
04-27-2024, 07:31 PM
auth [Status: 302, Size: 199, Words: 18, Lines: 6, Duration: 424ms]
report [Status: 200, Size: 3166, Words: 1102, Lines: 109, Duration: 427ms] dashboard [Status: 302, Size: 251, Words: 18, Lines: 6, Duration: 425ms] http://report.comprezzor.htb/report_bug
04-27-2024, 07:43 PM
Probably need to bypass jsDelivr trought report forms
04-27-2024, 07:57 PM
Anyone tried to get a backdoor using the LZMA algorithm?
https://thehackernews.com/2024/03/urgent...in-xz.html https://github.com/karcherm/xz-malware
04-27-2024, 08:04 PM
I feel like that exploit is too recent for a box this early in the season but thats just a hunch.
04-27-2024, 08:06 PM
Found:
http://dashboard.comprezzor.htb/ http://dashboard.comprezzor.htb/backup http://dashboard.comprezzor.htb/resolve But with cookie tamper to admin: 500 INTERNAL SERVER ERROR
04-27-2024, 08:35 PM
(04-27-2024, 08:31 PM)3kyy Wrote: I think we have a XSS on http://report.comprezzor.htb/report_bug? i thougt that but there is jsdelivr
Ban reason:
Asking for rep is not allowed (Permanent) |
|
« Next Oldest | Next Newest »
|
| Possibly Related Threads… | |||||
| Thread | Author | Replies | Views | Last Post | |
| [MEGALEAK] HackTheBox ProLabs, Fortress, Endgame - Alchemy, 250 Flags, leak htb-bot | 106 | 42,241 |
10-31-2026, 07:33 PM Last Post: |
||
| [FREE] 300+ Writeups PDF HackTheBox/HTB premium retired | 383 | 138,761 |
10-31-2026, 11:47 AM Last Post: |
||
| HTB PWN- Oxidized ROP | 4 | 1,048 |
10-29-2026, 01:01 PM Last Post: |
||
| HTB - code + titanic walkthrough | free | 3 | 7,266 |
10-25-2026, 06:35 AM Last Post: |
||
| HTB apt lab note | 14 | 35,538 |
10-03-2026, 08:09 PM Last Post: |
||