[VladTrun98]

discussion, i start with freedom

echo "e.tylar" > a.txt && GetNPUsers.py -request -format hashcat -outputfile asrep.roast -dc-ip '<ip>' -usersfile 'a.txt' 'freedom.htb/'

[malwguy]

An1 any hint on baking bad ?

DM me on disc (malw_guy) if u wanna talk

[sodanger123]

discussion, i start with freedom

echo "e.tylar" > a.txt && GetNPUsers.py -request -format hashcat -outputfile asrep.roast -dc-ip '<ip>' -usersfile 'a.txt' 'freedom.htb/'

Hey how you can ge e.tylar from that ?

---

discussion, i start with freedom

echo "e.tylar" > a.txt && GetNPUsers.py -request -format hashcat -outputfile asrep.roast -dc-ip '<ip>' -usersfile 'a.txt' 'freedom.htb/'

And also how you can get SQL injection from /admin/ ?

[bl4ckf0xk]

Any hint on Wanted Alive challenge in Forensic category??

[Surfacing2325]

I'm stuck on web_breaking_bad.
Basically, I need to somehow get access to the account financial-controller@frontier-board[.]htb, but nothing is working. I also can't forge JWT signatures... I even wrote a script for OTP to transfer money, but still no success.

[problematicmatcher]

I'm stuck on web_breaking_bad.
Basically, I need to somehow get access to the account financial-controller@frontier-board[.]htb, but nothing is working. I also can't forge JWT signatures... I even wrote a script for OTP to transfer money, but still no success.

I am stuck on this too. There is a py script that they provided that you need to complete and it gets the flag instantly but there are many things you need to complete

[malwguy]

for breaking bank, look for JWKS Spoofing

[Surfacing2325]

for breaking bank, look for JWKS Spoofing

Add me on Discord pls

---

for breaking bank, look for JWKS Spoofing

I had an idea to do it like this:
"jku": "http://127.0.0.1:1337/api/analytics/redirect?url=.well-known/jwks.json&ref=test"

---

for breaking bank, look for JWKS Spoofing

Add me on Discord pls

---

for breaking bank, look for JWKS Spoofing

I had an idea to do it like this:
"jku": "http://127.0.0.1:1337/api/analytics/redirect?url=.well-known/jwks.json&ref=test"

I already tested the above to see if it would work, and as a result, I got the following request:
but i got
HTTP/1.1 401 Unauthorized
Server: nginx
Date: Sat, 14 Dec 2024 14:52:12 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 29
Connection: keep-alive

{"error":"Invalid Signature"}

[bl4ckf0xk]

discussion, i start with freedom

echo "e.tylar" > a.txt && GetNPUsers.py -request -format hashcat -outputfile asrep.roast -dc-ip '<ip>' -usersfile 'a.txt' 'freedom.htb/'

Can't crack the hash with rockyou.txt. Got any other method?. I tried with hashcat

[0xfoxy]

discussion, i start with freedom

echo "e.tylar" > a.txt && GetNPUsers.py -request -format hashcat -outputfile asrep.roast -dc-ip '<ip>' -usersfile 'a.txt' 'freedom.htb/'

How did you get to this point, i mean i got the sql injection but the passwords are litteraly uncrackble, same goes for the hash you've sent(kerb)?