[HTB] Sea - Machine
by RedTeamer - Friday August 9, 2024 at 08:04 PM
Banned

Posts: 200
Threads: 14
Joined: Apr 2024
Reputation: 17

#11
08-10-2024, 07:58 PM
(08-10-2024, 07:54 PM)AdenBilal Wrote: there is ssrf on the website parameter in contact.php. start python server in your machine and enter that IP in the website with idnf
http://10.10.16.51:1235/idnf

why idnf?////////////
Ban reason:
Asking for rep is not allowed (Permanent)
Reply
RaidForums
Member
Posts: 1
Threads: 0
Joined: Jun 2024
Reputation: 0

#12
08-10-2024, 08:01 PM
(08-10-2024, 07:58 PM)osamy7593 Wrote:
(08-10-2024, 07:54 PM)AdenBilal Wrote: there is ssrf on the website parameter in contact.php. start python server in your machine and enter that IP in the website with idnf
http://10.10.16.51:1235/idnf

why idnf?////////////

That's just the file they're calling
Reply
Banned

Posts: 37
Threads: 0
Joined: Mar 2024
Reputation: 0

#13
08-10-2024, 08:12 PM
(08-10-2024, 08:01 PM)vainyyyyyy Wrote:
(08-10-2024, 07:58 PM)osamy7593 Wrote:
(08-10-2024, 07:54 PM)AdenBilal Wrote: there is ssrf on the website parameter in contact.php. start python server in your machine and enter that IP in the website with idnf
http://10.10.16.51:1235/idnf

why idnf?////////////

That's just the file they're calling


sorry for the delay idnf is just an identifier.
Ban reason: Leeching | http://raiddfzn73ir6iyxlf7nwytnujiflddog...an-Appeals if you feel this is incorrect. (Permanent)
Reply
RaidForums
Member
Posts: 24
Threads: 2
Joined: Jul 2024
Reputation: 1

#14
08-10-2024, 08:13 PM
At this point we all know the website parameter in the post request is the way forward
Reply
Banned

Posts: 37
Threads: 0
Joined: Mar 2024
Reputation: 0

#15
08-10-2024, 08:19 PM
i am receiving hits back to my server multiple times which either means the website URL I enter is getting fetched multiple times or it is getting stored anywhere and it is auto-execute for that.
Ban reason: Leeching | http://raiddfzn73ir6iyxlf7nwytnujiflddog...an-Appeals if you feel this is incorrect. (Permanent)
Reply
Banned

Posts: 37
Threads: 0
Joined: Mar 2024
Reputation: 0

#16
08-10-2024, 08:23 PM
(08-10-2024, 08:21 PM)gihimlek Wrote:
(08-10-2024, 08:19 PM)AdenBilal Wrote: i am receiving hits back to my server multiple times which either means the website URL I enter is getting fetched multiple times or it is getting stored anywhere and it is auto-execute for that.

Is getting stored
Trying brute forcing ssh with velik71 user, but without any expectation

how you found velik71 user
Ban reason: Leeching | http://raiddfzn73ir6iyxlf7nwytnujiflddog...an-Appeals if you feel this is incorrect. (Permanent)
Reply
RaidForums
Member
Posts: 24
Threads: 2
Joined: Jul 2024
Reputation: 1

#17
08-10-2024, 08:25 PM
(08-10-2024, 08:23 PM)AdenBilal Wrote:
(08-10-2024, 08:21 PM)gihimlek Wrote:
(08-10-2024, 08:19 PM)AdenBilal Wrote: i am receiving hits back to my server multiple times which either means the website URL I enter is getting fetched multiple times or it is getting stored anywhere and it is auto-execute for that.

Is getting stored
Trying brute forcing ssh with velik71 user, but without any expectation

how you found velik71 user

Home page
Reply
Banned

Posts: 37
Threads: 0
Joined: Mar 2024
Reputation: 0

#18
08-10-2024, 08:26 PM
(08-10-2024, 08:25 PM)kewlcat002 Wrote:
(08-10-2024, 08:23 PM)AdenBilal Wrote:
(08-10-2024, 08:21 PM)gihimlek Wrote:
(08-10-2024, 08:19 PM)AdenBilal Wrote: i am receiving hits back to my server multiple times which either means the website URL I enter is getting fetched multiple times or it is getting stored anywhere and it is auto-execute for that.

Is getting stored
Trying brute forcing ssh with velik71 user, but without any expectation

how you found velik71 user

Home page

yeah but ig that may or may not be ssh user.
Ban reason: Leeching | http://raiddfzn73ir6iyxlf7nwytnujiflddog...an-Appeals if you feel this is incorrect. (Permanent)
Reply
RaidForums
Member
Posts: 23
Threads: 8
Joined: Feb 2024
Reputation: -2

#19
08-10-2024, 08:27 PM
(08-10-2024, 08:23 PM)AdenBilal Wrote:
(08-10-2024, 08:21 PM)gihimlek Wrote:
(08-10-2024, 08:19 PM)AdenBilal Wrote: i am receiving hits back to my server multiple times which either means the website URL I enter is getting fetched multiple times or it is getting stored anywhere and it is auto-execute for that.

Is getting stored
Trying brute forcing ssh with velik71 user, but without any expectation

how you found velik71 user

Dude it's in the banner of the webpage.
Reply
Banned

Posts: 37
Threads: 0
Joined: Mar 2024
Reputation: 0

#20
08-10-2024, 08:29 PM
apache server is apache/2.4.41
Ban reason: Leeching | http://raiddfzn73ir6iyxlf7nwytnujiflddog...an-Appeals if you feel this is incorrect. (Permanent)
Reply


Possibly Related Threads…
Thread Author Replies Views Last Post
  [MEGALEAK] HackTheBox ProLabs, Fortress, Endgame - Alchemy, 250 Flags, leak htb-bot htb-bot 106 42,238 10-31-2026, 07:33 PM
Last Post: aistax
  [FREE] 300+ Writeups PDF HackTheBox/HTB premium retired Tamarisk 383 138,758 10-31-2026, 11:47 AM
Last Post: thaytoiyeucoay30nam
  HTB PWN- Oxidized ROP macavitysworld 4 1,045 10-29-2026, 01:01 PM
Last Post: A1Raid3r
  HTB - code + titanic walkthrough | free tony_boom23 3 7,262 10-25-2026, 06:35 AM
Last Post: A1Raid3r
  HTB apt lab note zapot 14 35,535 10-03-2026, 08:09 PM
Last Post: whuuaa



 Users browsing this thread: 2 Guest(s)