[HTB] Lantern
by RedTeamer - Saturday August 17, 2024 at 10:14 AM
Advanced User

Posts: 62
Threads: 8
Joined: Aug 2024
Reputation: -1

#41
08-17-2024, 10:35 PM
(08-17-2024, 10:28 PM)Anaunimans Wrote: we have lfi try get Data.db

or may be this dbstorage.js
Reply
Banned

Posts: 200
Threads: 14
Joined: Apr 2024
Reputation: 17

#42
08-17-2024, 10:37 PM
(08-17-2024, 10:28 PM)Anaunimans Wrote: we have lfi try get Data.db

how u got it ?...
Ban reason:
Asking for rep is not allowed (Permanent)
Reply
Advanced User

Posts: 62
Threads: 8
Joined: Aug 2024
Reputation: -1

#43
08-17-2024, 10:38 PM
(08-17-2024, 10:37 PM)osamy7593 Wrote:
(08-17-2024, 10:28 PM)Anaunimans Wrote: we have lfi try get Data.db

how u got it ?...

/_framework/InternaLantern.dll
Reply
RaidForums
Member
Posts: 2
Threads: 0
Joined: Jul 2024
Reputation: 0

#44
08-17-2024, 10:42 PM
Identified a path
/home/tomas/LanternAdmin/bin/Debug/net6.0/LanternAdmin.dll
from an error message.
I tried to download it through the aforementioned path traversal or loading that module via the admin panel, but neither worked for me
Reply
RaidForums
Member
Posts: 3
Threads: 0
Joined: Jun 2024
Reputation: 0

#45
08-17-2024, 10:46 PM
(08-17-2024, 10:38 PM)rootme1122 Wrote:
(08-17-2024, 10:37 PM)osamy7593 Wrote:
(08-17-2024, 10:28 PM)Anaunimans Wrote: we have lfi try get Data.db

how u got it ?...

/_framework/InternaLantern.dll

Is it in dll ?
Reply
RaidForums
Member
Posts: 107
Threads: 1
Joined: Apr 2024
Reputation: 3

#46
08-17-2024, 10:48 PM (This post was last modified: 08-17-2024, 10:50 PM by jsvensson.)
i'm trying to read FileUpload.dll - maybe there is a way to upload file not to static/images
(08-17-2024, 10:42 PM)carbonzillioxide Wrote: Identified a path
/home/tomas/LanternAdmin/bin/Debug/net6.0/LanternAdmin.dll
from an error message.
I tried to download it through the aforementioned path traversal or loading that module via the admin panel, but neither worked for me

from path traversal it can't be done because www-data doesn't have rights to /home/tomas
Reply
RaidForums
Member
Posts: 11
Threads: 0
Joined: Jul 2024
Reputation: 0

#47
08-17-2024, 11:01 PM
(08-17-2024, 10:48 PM)jsvensson Wrote: i'm trying to read FileUpload.dll - maybe there is a way to upload file not to static/images
(08-17-2024, 10:42 PM)carbonzillioxide Wrote: Identified a path
/home/tomas/LanternAdmin/bin/Debug/net6.0/LanternAdmin.dll
from an error message.
I tried to download it through the aforementioned path traversal or loading that module via the admin panel, but neither worked for me

from path traversal it can't be done because www-data doesn't have rights to /home/tomas

Datadb is probably with the binary. But then, that server is run by tomas, so www-data shouldnt have access to data.db either way.
Reply
Banned

Posts: 36
Threads: 0
Joined: Apr 2024
Reputation: 1

#48
08-17-2024, 11:04 PM
use path traversal for shell..
Ban reason: Leeching | http://raiddfzn73ir6iyxlf7nwytnujiflddog...an-Appeals if you feel this is incorrect. (Permanent)
Reply
Banned

Posts: 200
Threads: 14
Joined: Apr 2024
Reputation: 17

#49
08-17-2024, 11:05 PM
(08-17-2024, 11:04 PM)nomx1337 Wrote: use path traversal for shell..

How u gained the shell?
Ban reason:
Asking for rep is not allowed (Permanent)
Reply
RaidForums
Member
Posts: 13
Threads: 0
Joined: Feb 2024
Reputation: 0

#50
08-17-2024, 11:05 PM
can we have sqli so then we can run shell command using sqlite's .shell utility
Reply


Possibly Related Threads…
Thread Author Replies Views Last Post
  [MEGALEAK] HackTheBox ProLabs, Fortress, Endgame - Alchemy, 250 Flags, leak htb-bot htb-bot 106 42,260 10-31-2026, 07:33 PM
Last Post: aistax
  [FREE] 300+ Writeups PDF HackTheBox/HTB premium retired Tamarisk 383 138,781 10-31-2026, 11:47 AM
Last Post: thaytoiyeucoay30nam
  HTB PWN- Oxidized ROP macavitysworld 4 1,058 10-29-2026, 01:01 PM
Last Post: A1Raid3r
  HTB - code + titanic walkthrough | free tony_boom23 3 7,274 10-25-2026, 06:35 AM
Last Post: A1Raid3r
  HTB apt lab note zapot 14 35,546 10-03-2026, 08:09 PM
Last Post: whuuaa



 Users browsing this thread: 7 Guest(s)