HTB Pentest Notes - Challenge
by StingEm - Saturday October 26, 2024 at 09:53 PM
#11
Thanks for sharing!!!!!!
Ban reason: Leeching | http://raiddfzn73ir6iyxlf7nwytnujiflddog...an-Appeals if you feel this is incorrect. (Permanent)
Reply
#12
I was stuck after finding the main vulnerability but couldn't get the proper payload. Thanks for the directions!
Reply
#13
very easy))
* is treat directly, not wildcard
[Image: SP4pD.gif]
htb-bot.mysellix.io

HTB Writeup. Challenge Flag. Exam Solution. CTF Carry.
We are your pentest company selling help to make you good.
Best price, DM if need anything. See anywhere cheaper, DM and we do better.
Reply
#14
im still stuck here "name=';CALL+EXEC('echo "ss" > /tmp/revshell')%3b--" after creat alias
Reply
#15
any idea of how to get the flag?
Reply
#16
Im stuck here name= ' or 1=0; CALL EXECVE('ls'); -- -
Reply
#17
(10-30-2024, 09:45 AM)Art10n Wrote: Use it in the POST and with Burp Suite

I did that but I am getting a `500` error. Someone please help !
Ban reason: Leeching. (Permanent)
Reply
#18
(12-30-2024, 06:32 PM)0xbeef Wrote:
(10-30-2024, 09:45 AM)Art10n Wrote: Use it in the POST and with Burp Suite

I did that but I am getting a `500` error. Someone please help !

You may have already done this... but... 
Usually when that happens during a challenge - and I know all is correct - I reset / STOP the instance and then wait 2 minutes and estart - I usually get another IP and things work as they should. 

I just had to do it on Replace Me and it fixed the issue I was having - 30 minutes of double checking things to find out it was my Instance of the Challenge I was using.

I hope it helps!
Reply
#19
I made a free post of how to do this challenge step by step
Reply
#20
(12-30-2024, 07:41 PM)whare Wrote: I made a free post of how to do this challenge step by step

Just saw it and saw my mistake too, I skipped something in the process

(12-30-2024, 07:27 PM)StingEm Wrote:
(12-30-2024, 06:32 PM)0xbeef Wrote:
(10-30-2024, 09:45 AM)Art10n Wrote: Use it in the POST and with Burp Suite

I did that but I am getting a `500` error. Someone please help !

You may have already done this... but... 
Usually when that happens during a challenge - and I know all is correct - I reset / STOP the instance and then wait 2 minutes and estart - I usually get another IP and things work as they should. 

I just had to do it on Replace Me and it fixed the issue I was having - 30 minutes of double checking things to find out it was my Instance of the Challenge I was using.

I hope it helps!

Thanks for you reply, but I was also missing a step but will think of restarting next time
Ban reason: Leeching. (Permanent)
Reply


Possibly Related Threads…
Thread Author Replies Views Last Post
  [FREE] 300+ Writeups PDF HackTheBox/HTB premium retired Tamarisk 365 113,328 Yesterday, 07:30 PM
Last Post: N1GHTC0D3
  HTB Eloquia User and Root Flags - Insane Box 69646B 14 17,596 08-21-2026, 07:27 PM
Last Post: tangol
  [MEGALEAK] HackTheBox ProLabs, Fortress, Endgame - Alchemy, 250 Flags, leak htb-bot htb-bot 94 26,211 08-21-2026, 06:20 AM
Last Post: jamoski
  [FREE] HTB-ProLabs APTLABS Just Flags kewlsunny 25 19,487 08-15-2026, 06:06 PM
Last Post: m4573rx
  HTB - ALL Challenges you Stuck in osamy7593 3 17,642 08-15-2026, 01:58 AM
Last Post: 0xIDA



 Users browsing this thread: 1 Guest(s)