Struggling to get the right file to upload, tested loads of file types all resulting in Runtime errors.
A nudge would be great!
Can I ask question about priv esc?I’m using right exploit but it doesn’t work
@ghroot said:
Can I ask question about priv esc?I’m using right exploit but it doesn’t work
Make sure you are using the right shell architecture. I had problems with x86 shell running exploits in a x64 system. If it is your case, migrate it to a x64 shell.
I had quite a lot of issues with RCE, but rooting was easy. (:
Edit: Figured it out. A simple Google search with the right terms related to what you’re trying to do (server type, the action you’re performing on the “t” page, etc) will get you started with RCE. Then it’s just a matter of keeping it very, very simple and using tools available on the host.
Big thanks to @wilsonnkwan - I picked up user but my privesc-fu is too weak. I’m going to invest in the HTB membership and work my way through the retirees to gain some experience (while checking out @ippsec when stuck). Thanks all - great forums!
Any hints on which of the retired boxes have similar steps in it that might help with Bounty? PM if you’re open to sharing that info.
I’ve got the RCE but I cant even cd out of the directory I’m in. seems like only basic commands work. I’m trying to download stuff from my machine that will allow me to do other stuff but the RCE is really limited. I’ve been at this for a week and its driving me crazy! Please DM with a hint.
@opt1kz said:
Edit: Figured it out. A simple Google search with the right terms related to what you’re trying to do (server type, the action you’re performing on the “t” page, etc) will get you started with RCE. Then it’s just a matter of keeping it very, very simple and using tools available on the host.
Any you guys got a decent extension fuzzing list that you are willing to share … mines is pretty poor.
Edit: Never mind. Rooted.
Anyone willing to shoot me a PM on the privesc? I have a reliable shell but I’m not sure on what to do next.
@securityNinja said:
@opt1kz check the architecture
It wasn’t an architecture issue, but thanks for responding. Just rooted it.
Going to have to shelf this one for now. Read through every post in this discussion and I’m still not entirely sure what I’m supposed to be looking for in these directories…
Guys any nude on get through 404 error while doing RCE? Might help a lot or if possible me
@Andromalius said:
Going to have to shelf this one for now. Read through every post in this discussion and I’m still not entirely sure what I’m supposed to be looking for in these directories…
Have you looked at all of the files on the site that you have access to? Give it a go with your enumeration tool of choice and see what you can / cannot access.
hi
can anybody give pm for initial steps
anu budy can pm about rce and 500 error
@bradmn I honestly can’t remember anymore, but I’ve gotten a few roots since then. Might have learned enough to see something I missed before.
Looking forward to heading back tomorrow.