Ariekei

HTB Content
1

Can’t find any posts about this one yet. I’m a bit stuck on this and I’m not sure if I’m going down a rabbit hole. I found a script that would suggest one popular type of vuln, all i’ve managed to actually get work is xss unfortunately. It blocks certain attempts to inject stuff and you end up with that ■■■■■■ smiley lol.

Any hints or tips would be great.

2

enumerate more with classic tool for scanning

3

I cannot find a way in!! I have found a user? and another place to scan, but nothing that squeals come in!!! Can someone assist (I don’t want the answer just to see if I am going way off target).

4

I’ve also manage to enumerate some users, but any web based scanning doesnt give me what im looking for, nikto doesnt run, even using WAF bypasses… it just hangs.
dirb only find one interesting page, but it redirects to a dead page… am i rabbit holing, i feel like i am…

5

I’ve scanned everything. There is clearly something I am missing.

6

I found something else to “attack”

7

i have found 2 things that need a device that unlocks doors…
i have found one thing that need maintenance…

8

I’m pretty sure a WAF is getting in my way of enumeration…

9

@peek said:
enumerate more with classic tool for scanning

can you advice some waf evasion papers / sites?

10

there are a number of switches in some of the common tools in kali …

might want to try

man NAME OF TOOL and read through some of the -e switches etc

11

Nobody is working on this box right now? Pretty stuck after found some evidence.

12

guys, i need help for getting root. pm me pls.

13

Can someone pm me? Im stucked at the first “container”

14 
                          oooo$$$$$$$$$$$$oooo
                      oo$$$$$$$$$$$$$$$$$$$$$$$$o
                   oo$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$o         o$   $$ o$
   o $ oo        o$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$o       $$ $$ $$o$
oo $ $ "$      o$$$$$$$$$    $$$$$$$$$$$$$    $$$$$$$$$o       $$$o$$o$
"$$$$$$o$     o$$$$$$$$$      $$$$$$$$$$$      $$$$$$$$$$o    $$$$$$$$
  $$$$$$$    $$$$$$$$$$$      $$$$$$$$$$$      $$$$$$$$$$$$$$$$$$$$$$$
  $$$$$$$$$$$$$$$$$$$$$$$    $$$$$$$$$$$$$    $$$$$$$$$$$$$$  """$$$
   "$$$""""$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$     "$$$
    $$$   o$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$     "$$$o
   o$$"   $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$       $$$o
   $$$    $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$" "$$$$$$ooooo$$$$o
  o$$$oooo$$$$$  $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$   o$$$$$$$$$$$$$$$$$
  $$$$$$$$"$$$$   $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$     $$$$""""""""
 """"       $$$$    "$$$$$$$$$$$$$$$$$$$$$$$$$$$$"      o$$$
            "$$$o     """$$$$$$$$$$$$$$$$$$"$$"         $$$
              $$$o          "$$""$$$$$$""""           o$$$
               $$$$o                                o$$$"
                "$$$$o      o$$$$$$o"$$$$o        o$$$$
                  "$$$$$oo     ""$$$$o$$$$$o   o$$$$""
                     ""$$$$$oooo  "$$$o$$$$$$$$$"""
                        ""$$$$$$$oo $$$$$$$$$$
                                """"$$$$$$$$$$$
                                    $$$$$$$$$$$$
                                     $$$$$$$$$$"
                                      "$$$""""
15

I am begin to hate it!

16

Is the Waf bypass the right way?

17

Nop

18

Thanks!

19

this might be a nice machine. But so far I have found nothing interesting if Waf bypass is not the intention. There is one thing, which is quite old, but even that needs a key.

Hmm. Hmm.