HTB Academy Credential Hunting in Windows

HTB Content Academy
1

I’m having a hard time with the Login To HTB Academy & Continue Learning | HTB Academy activities
specifically the question “What is the GitLab access code Bob uses? (Format: Case-Sensitive)”

I opened the Firefox of the user Bob and found the password, i also ran lazagne to see if i missed a password. but the only password related to Git-lab is the one i found (the password even has Git in it) but no matter how i submit this password I’m always told its wrong. i tried checking for trailing spaces, adding trailing spaces, removing upper case letters but nothing has worked.

If access code and password are different things then i also don’t see that mentioned anywhere.

i don’t really know what else it could be so I’m kinda stuck, if anyone knows what I’m doing wrong any help would be appreciated.

2

Hello, the password in firefox (I assume it is Gitadmin123) is not an access code. You may try this command in cmd, spoiler: findstr /SIM /C:"GitLab" *.txt

1 Like
3

thanks you, that was it.

1 Like
4

how did you transfer lazagne to windows??

5

nvm solved it

7

use the +clipboard with xfreerdp

8

please help me, I stuck in WinSCP. what can i do?

9

You can Use Lazagne.exe all

11

i used this

12

i use the

C:\Users\bob\Desktop>findstr /SIM /C:"GITLAB" *.txt *.ini *.cfg *.config *.xml *.git *.ps1 *.yml | type WorkStuff\GitlabAccessCodeJustIncase.txt
13

If any here want transfer the LaZagne.exe to Win10 machine, use this command below in you attack box.

rdesktop -r disk:share=/home/transfer/filehereinsidereadytotransfer/ -u xxxx -p xxxx 10.10.10.10 (ip of the windows machine)

14

basically what you need do is use the LaZagne.exe with these command below

C:\Users\bob\Desktop>LaZagne.exe all

Note: you need many atention with the output showing in the cmd shell, because you may have a little confusion about the users