does anyone know what this message means ?
WARNING: Failed to daemonise. This is quite common and not fatal. Connection timed out (110)
this is the message i get while i link to the shell i’ve uploaded… and it’s not connecting back to my listener…
can anyone help please?
edit: oops… i’m an idiot… firewall. duh.
thanks for helping a newb like me guys… much appreciated!
if anyone needs a push in the right direction i’ll be willing to help! just pm
Type your comment> @xyzxyz said:
Please someone PM me “File upload is not allwoed”??? isn’t that supposed to be the way or did i miss something here?
Are you sure system tells you the truth?
Hi all,
This is my second machine, just after advise on how I should start this machine off. Just an application name I should look into, just so I can enhance my learning. PM me please.
HF
This is the first machine that I do in HTB. I was a lot confused with this machine. But It was very funny.
finally rooted, I agree that the User part was waaay harder and misleading… deff check the source-code of the app from GitHub
root was EZ
Rooted!
Pretty straight forward, im still confused if i really needed the cred from g**** api
rooted. Might someone get in touch with me to discuss the higher port method?
Rooted!
Thanks to @jacknife for the hint on Root, and to @ecro80 for the hint on the code.
Happy to assist too.
check port 3000 then find ticket using support center header name. be sure your gmt time.
i’ve tried everything google and searchsploit has to offer with this file extension filter, any hints would be much appreciated
Type your comment> @Reiahx01 said:
i’ve tried everything google and searchsploit has to offer with this file extension filter, any hints would be much appreciated
check the sourcecode of the file upload of helpdeskz on their github repo and try to understand what exactly happens on uploading a file 
Type your comment> @Enyone said:
Type your comment> @Reiahx01 said:
i’ve tried everything google and searchsploit has to offer with this file extension filter, any hints would be much appreciated
check the sourcecode of the file upload of helpdeskz on their github repo and try to understand what exactly happens on uploading a file
from what i see it only appends the very last file extension, so double extension doesn’t work. tried inserting null byte and still nothing. i’ll keep looking but for whatever reason i’m not seeing it yet
I have tried all the possible steps:
submit ticket :-
step 1 file supported
1: change time zone to L0
2: upload se* with extention (no luck)/ call it back after changing the ‘x’ range
step 2 er: file not supported (no luck)
yes I have changed php -reverse -shell already using (/usr/share/webshell/php/reverse*)
in exploit not sure what code should I use ?
currentTime= (???)
Thanks
Whenever I upload the exploit and compile it, I get an invalid argument error. I can run it fine from my webshell, but it does not work from the actual pty shell.
rooted!!! finally!!!
need hint to proceed with .*s or shell upload, or port 80
Manage to get root without obtaining credentials via the Shiv query, if anyone could enlighten me via PM what the query is I would be grateful as I am intrigued.
Anyone seeking nudges feel free to PM me.
Can anyone point me in the right direction? I tried all the different ports but keep getting “WARNING: Failed to daemonise. This is quite common and not fatal. Connection timed out (110)”, someone mentioned firewall but I’m lost right now.
Type your comment> @lufee said:
Can anyone point me in the right direction? I tried all the different ports but keep getting “WARNING: Failed to daemonise. This is quite common and not fatal. Connection timed out (110)”, someone mentioned firewall but I’m lost right now.
ahh… figured it out
Type your comment> @lufee said:
Can anyone point me in the right direction? I tried all the different ports but keep getting “WARNING: Failed to daemonise. This is quite common and not fatal. Connection timed out (110)”, someone mentioned firewall but I’m lost right now.
Pretty sure that’s a message coming from your php reverse shell. If you are listening to the port specified in the reverse shell code and you get a shell it mostly shouldn’t matter. Reasons as to why can be examined within the code 