Any hints for Jerry?

Watricas · July 2, 2018, 8:15am

I’ve been stuck on Jerry for a bit, mostly because of the childish people/person that keeps changing the login for you know what.

The part that I’m stuck at right now is the exploit, I keep getting this error:
[-] Exploit aborted due to failure: unknown: Upload failed on /manager/html/upload/deploy?path=/Lk1IJ6WJyMFlF5x7sA4c [401 Unauthorized] (Earlier it said 403 forbidden, but I fixed it.)

I set the httppassword and httpusername

I tried making this thread with minimal spoilers, if any. Any hints? Anyone with the same problem?

w31rd0 · July 2, 2018, 9:00am

@Watricas said:
I’ve been stuck on Jerry for a bit, mostly because of the childish people/person that keeps changing the login for you know what.

The part that I’m stuck at right now is the exploit, I keep getting this error:
[-] Exploit aborted due to failure: unknown: Upload failed on /manager/html/upload/deploy?path=/Lk1IJ6WJyMFlF5x7sA4c [401 Unauthorized] (Earlier it said 403 forbidden, but I fixed it.)

I set the httppassword and httpusername

I tried making this thread with minimal spoilers, if any. Any hints? Anyone with the same problem?

there is an Ippsec video that does implements what you need to do. just follow that and it will be easy (if people dont screw up the machine)

Watricas · July 2, 2018, 9:14am

@w31rd0 said:

@Watricas said:
I’ve been stuck on Jerry for a bit, mostly because of the childish people/person that keeps changing the login for you know what.

The part that I’m stuck at right now is the exploit, I keep getting this error:
[-] Exploit aborted due to failure: unknown: Upload failed on /manager/html/upload/deploy?path=/Lk1IJ6WJyMFlF5x7sA4c [401 Unauthorized] (Earlier it said 403 forbidden, but I fixed it.)

I set the httppassword and httpusername

I tried making this thread with minimal spoilers, if any. Any hints? Anyone with the same problem?

there is an Ippsec video that does implements what you need to do. just follow that and it will be easy (if people dont screw up the machine)

What’s the name of it? Could you link me or tell me the title of the video?

w31rd0 · July 2, 2018, 9:27am

@Watricas said:

@w31rd0 said:

@Watricas said:
I’ve been stuck on Jerry for a bit, mostly because of the childish people/person that keeps changing the login for you know what.

The part that I’m stuck at right now is the exploit, I keep getting this error:
[-] Exploit aborted due to failure: unknown: Upload failed on /manager/html/upload/deploy?path=/Lk1IJ6WJyMFlF5x7sA4c [401 Unauthorized] (Earlier it said 403 forbidden, but I fixed it.)

I set the httppassword and httpusername

I tried making this thread with minimal spoilers, if any. Any hints? Anyone with the same problem?

there is an Ippsec video that does implements what you need to do. just follow that and it will be easy (if people dont screw up the machine)

What’s the name of it? Could you link me or tell me the title of the video?

just do a youtube search with the name of the service used… you can easily find it

Watricas · July 2, 2018, 9:34am

@w31rd0 said:

@Watricas said:

@w31rd0 said:

@Watricas said:
I’ve been stuck on Jerry for a bit, mostly because of the childish people/person that keeps changing the login for you know what.

The part that I’m stuck at right now is the exploit, I keep getting this error:
[-] Exploit aborted due to failure: unknown: Upload failed on /manager/html/upload/deploy?path=/Lk1IJ6WJyMFlF5x7sA4c [401 Unauthorized] (Earlier it said 403 forbidden, but I fixed it.)

I set the httppassword and httpusername

I tried making this thread with minimal spoilers, if any. Any hints? Anyone with the same problem?

there is an Ippsec video that does implements what you need to do. just follow that and it will be easy (if people dont screw up the machine)

What’s the name of it? Could you link me or tell me the title of the video?

just do a youtube search with the name of the service used… you can easily find it

Ippsec doesn’t do videos on machines that aren’t retired, if you were suggesting I search up videos for Jerry

w31rd0 · July 2, 2018, 9:49am

i am reffering to the service that is implemented in the box. not the name of the box.
so yeah it is a retired machine

BobBobbington · July 2, 2018, 11:02am

@w31rd0 said:
i am reffering to the service that is implemented in the box. not the name of the box.
so yeah it is a retired machine

Thanks for the advice, I’m on the box but I cannot find the user file its not in the desktop of admin or public

Jomar · July 2, 2018, 11:34am

Maybe you’re not in the right folder

BobBobbington · July 2, 2018, 11:36am

@Jomar said:
Maybe you’re not in the right folder

I’m in c:/users

Watricas · July 2, 2018, 11:53am

@Jomar said:
Maybe you’re not in the right folder

@BobBobbington said:

@Jomar said:
Maybe you’re not in the right folder

I’m in c:/users

I’m still getting the 401 unauthorized message.

Frey · July 2, 2018, 11:55am

@Watricas said:
I’ve been stuck on Jerry for a bit, mostly because of the childish people/person that keeps changing the login for you know what.

The part that I’m stuck at right now is the exploit, I keep getting this error:
[-] Exploit aborted due to failure: unknown: Upload failed on /manager/html/upload/deploy?path=/Lk1IJ6WJyMFlF5x7sA4c [401 Unauthorized] (Earlier it said 403 forbidden, but I fixed it.)

I set the httppassword and httpusername

I tried making this thread with minimal spoilers, if any. Any hints? Anyone with the same problem?

You are using wrong exploit. You need the one with the upload. Deploy does not have permissions over specific folders to execute, upload does.

Watricas · July 2, 2018, 12:30pm

@Frey said:
@Watricas said:
I’ve been stuck on Jerry for a bit, mostly because of the childish people/person that keeps changing the login for you know what.
  The part that I'm stuck at right now is the exploit, I keep getting this error:
[-] Exploit aborted due to failure: unknown: Upload failed on /manager/html/upload/deploy?path=/Lk1IJ6WJyMFlF5x7sA4c [401 Unauthorized] (Earlier it said 403 forbidden, but I fixed it.)

  I set the httppassword and httpusername

  I tried making this thread with minimal spoilers, if any. Any hints? Anyone with the same problem?
You are using wrong exploit. You need the one with the upload. Deploy does not have permissions over specific folders to execute, upload does.

What’s the name of that exploit? tomcat_mgr_upload ?

seiyathesinx · July 2, 2018, 12:45pm

basic enumeration will get you in

BobBobbington · July 2, 2018, 2:06pm

@Watricas said:
@Frey said:
@Watricas said:
I’ve been stuck on Jerry for a bit, mostly because of the childish people/person that keeps changing the login for you know what.
  The part that I'm stuck at right now is the exploit, I keep getting this error:
[-] Exploit aborted due to failure: unknown: Upload failed on /manager/html/upload/deploy?path=/Lk1IJ6WJyMFlF5x7sA4c [401 Unauthorized] (Earlier it said 403 forbidden, but I fixed it.)

  I set the httppassword and httpusername

  I tried making this thread with minimal spoilers, if any. Any hints? Anyone with the same problem?
You are using wrong exploit. You need the one with the upload. Deploy does not have permissions over specific folders to execute, upload does.
What’s the name of that exploit? tomcat_mgr_upload ?

There is a great video ippsec did that guides you through

Watricas · July 2, 2018, 4:24pm

@BobBobbington said:
@Watricas said:
@Frey said:
@Watricas said:
I’ve been stuck on Jerry for a bit, mostly because of the childish people/person that keeps changing the login for you know what.
  The part that I'm stuck at right now is the exploit, I keep getting this error:
[-] Exploit aborted due to failure: unknown: Upload failed on /manager/html/upload/deploy?path=/Lk1IJ6WJyMFlF5x7sA4c [401 Unauthorized] (Earlier it said 403 forbidden, but I fixed it.)

  I set the httppassword and httpusername

  I tried making this thread with minimal spoilers, if any. Any hints? Anyone with the same problem?
You are using wrong exploit. You need the one with the upload. Deploy does not have permissions over specific folders to execute, upload does.
What’s the name of that exploit? tomcat_mgr_upload ?
There is a great video ippsec did that guides you through

He hasn’t done one on Jerry, what are y’all talking about?

w31rd0 · July 2, 2018, 5:22pm

@Watricas said:
@BobBobbington said:
@Watricas said:
@Frey said:
@Watricas said:
I’ve been stuck on Jerry for a bit, mostly because of the childish people/person that keeps changing the login for you know what.
  The part that I'm stuck at right now is the exploit, I keep getting this error:
[-] Exploit aborted due to failure: unknown: Upload failed on /manager/html/upload/deploy?path=/Lk1IJ6WJyMFlF5x7sA4c [401 Unauthorized] (Earlier it said 403 forbidden, but I fixed it.)

  I set the httppassword and httpusername

  I tried making this thread with minimal spoilers, if any. Any hints? Anyone with the same problem?
You are using wrong exploit. You need the one with the upload. Deploy does not have permissions over specific folders to execute, upload does.
What’s the name of that exploit? tomcat_mgr_upload ?
There is a great video ippsec did that guides you through
He hasn’t done one on Jerry, what are y’all talking about?

if everyone is pointing you towards a specific direction and you cant find it, probably you are not searching hard enough

ReverendShell · July 2, 2018, 5:34pm

@Watricas said:
@BobBobbington said:
@Watricas said:
@Frey said:
@Watricas said:
I’ve been stuck on Jerry for a bit, mostly because of the childish people/person that keeps changing the login for you know what.
  The part that I'm stuck at right now is the exploit, I keep getting this error:
[-] Exploit aborted due to failure: unknown: Upload failed on /manager/html/upload/deploy?path=/Lk1IJ6WJyMFlF5x7sA4c [401 Unauthorized] (Earlier it said 403 forbidden, but I fixed it.)

  I set the httppassword and httpusername

  I tried making this thread with minimal spoilers, if any. Any hints? Anyone with the same problem?
You are using wrong exploit. You need the one with the upload. Deploy does not have permissions over specific folders to execute, upload does.
What’s the name of that exploit? tomcat_mgr_upload ?
There is a great video ippsec did that guides you through
He hasn’t done one on Jerry, what are y’all talking about?

Let me know if you find out what that video is . I’d like to see it too.

Watricas · July 2, 2018, 7:00pm

@DrChud said:
@Watricas said:
@BobBobbington said:
@Watricas said:
@Frey said:
@Watricas said:
I’ve been stuck on Jerry for a bit, mostly because of the childish people/person that keeps changing the login for you know what.
  The part that I'm stuck at right now is the exploit, I keep getting this error:
[-] Exploit aborted due to failure: unknown: Upload failed on /manager/html/upload/deploy?path=/Lk1IJ6WJyMFlF5x7sA4c [401 Unauthorized] (Earlier it said 403 forbidden, but I fixed it.)

  I set the httppassword and httpusername

  I tried making this thread with minimal spoilers, if any. Any hints? Anyone with the same problem?
You are using wrong exploit. You need the one with the upload. Deploy does not have permissions over specific folders to execute, upload does.
What’s the name of that exploit? tomcat_mgr_upload ?
There is a great video ippsec did that guides you through
He hasn’t done one on Jerry, what are y’all talking about?
Let me know if you find out what that video is . I’d like to see it too.

I completed it, turns out I was using the wrong msf module.

Watricas · July 2, 2018, 7:02pm

@w31rd0 said:
@Watricas said:
@BobBobbington said:
@Watricas said:
@Frey said:
@Watricas said:
I’ve been stuck on Jerry for a bit, mostly because of the childish people/person that keeps changing the login for you know what.
  The part that I'm stuck at right now is the exploit, I keep getting this error:
[-] Exploit aborted due to failure: unknown: Upload failed on /manager/html/upload/deploy?path=/Lk1IJ6WJyMFlF5x7sA4c [401 Unauthorized] (Earlier it said 403 forbidden, but I fixed it.)

  I set the httppassword and httpusername

  I tried making this thread with minimal spoilers, if any. Any hints? Anyone with the same problem?
You are using wrong exploit. You need the one with the upload. Deploy does not have permissions over specific folders to execute, upload does.
What’s the name of that exploit? tomcat_mgr_upload ?
There is a great video ippsec did that guides you through
He hasn’t done one on Jerry, what are y’all talking about?
if everyone is pointing you towards a specific direction and you cant find it, probably you are not searching hard enough

Or perhaps they were bluntly giving me a source that they hadn’t confirmed had been done yet. I completed it because I had been using the wrong msf module the whole time. I like your quote though.

Watricas · July 2, 2018, 7:03pm

@Frey said:

@Watricas said:
I’ve been stuck on Jerry for a bit, mostly because of the childish people/person that keeps changing the login for you know what.

The part that I’m stuck at right now is the exploit, I keep getting this error:
[-] Exploit aborted due to failure: unknown: Upload failed on /manager/html/upload/deploy?path=/Lk1IJ6WJyMFlF5x7sA4c [401 Unauthorized] (Earlier it said 403 forbidden, but I fixed it.)

I set the httppassword and httpusername

I tried making this thread with minimal spoilers, if any. Any hints? Anyone with the same problem?

You are using wrong exploit. You need the one with the upload. Deploy does not have permissions over specific folders to execute, upload does.

Thanks, you solved my problem, I am currently on Poison. Turns out the whole time I was just using the wrong module.