Ghoul

HTB Content Machines
,
1

Eat or be eaten :skull_and_crossbones:

2

its time to become a ghoul

3

i can smell the blood

4

5

nice box

6

waddup? 1000 -7 ?

7

Think I found the source of the RCE… But how do I change the “type” to access it… That is the question :slight_smile:

8

Type your comment> @Farbs said:

Think I found the source of the RCE… But how do I change the “type” to access it… That is the question :slight_smile:

ive done that, it does nothing as far as i know

9

Type your comment> @EmmaSamms said:

Type your comment> @Farbs said:

Think I found the source of the RCE… But how do I change the “type” to access it… That is the question :slight_smile:

ive done that, it does nothing as far as i know

are you talking about bypassing the upload restrictions?

10

Do we have to bruteforce to get credentials?

11

Type your comment> @Collins19008 said:

Type your comment> @EmmaSamms said:

Type your comment> @Farbs said:

Think I found the source of the RCE… But how do I change the “type” to access it… That is the question :slight_smile:

ive done that, it does nothing as far as i know

are you talking about bypassing the upload restrictions?

yes

12

Any hint on where the uploads go? I’m able to bypass the restrictions - or at least it says so

13

I’ve managed to “bypass” the restrictions, but trying to find out where the files “go” after that… I think I’m uploading what I have to in order to get a shell, but not sure where to access it once it “disappears”…

14

Found it…:smiley:

15

I also found the s*****.php file, but not exactly sure what I’m supposed to be getting out of it.

16

@dev17 Imgur: The magic of the Internet

17

am i going to have to have some knowledge on this show ie character names in order to get creds?

18

I hope this is not going to require to watch the anime in order to guess the credentials.

19

Type your comment> @ambi said:

I hope this is not going to require to watch the anime in order to guess the credentials.

haha thats what i was worried about…

20

Type your comment> @Collins19008 said:

Type your comment> @ambi said:

I hope this is not going to require to watch the anime in order to guess the credentials.

haha thats what i was worried about…

I curious… but this all seems like that. The box’s author’s left a movie about that anime like it’s supposed to provide us some imagination about how to guess credentials, so… I don’t know honestly. The machine is very focused on the movie.