Netmon

HTB Content Machines
743

This was a great box to learn on :slight_smile: canā€™t wait for more like this to concrete in these skills

744

Type your comment> @TheJag said:

Type your comment> @Arrow said:

Hello all.
I am quite confused with getting the creds for the WebApp.
Not quite sure if I got the right password from the d** files and not working due to the fact that some people do constantly change the password or if I am getting it completely wrong.
Could someone offer me a piece of help? :slight_smile:
Thank you in advance!

From what you are saying sounds like you are looking in the right place just find the right d** file (it will have the creds) and then look at the time it was saved (Trying not to give it away) :wink:

Woow, I see what you mean! Oh my, I should get myself a pair of glasses, I guess! xD
Thank you very much for helping out! :slight_smile:

745

That was a pleasant machine. Too much fun! Ask you need advice.

746

Type your comment> @Randsec said:

So how are we supposed to launch notifications? I added a custom one to a lot of devices, but Iā€™m not able to trigger it. Hints? Pm me please.

edit: Nevermind. I got it.

me too. Can you help me.I donā€™t know how to trigger notification. Please PM ME.

747

I click bell and edit sensorā€™s notification . all fail. so sad.Please PM me. thank you .

748

I will appreciate it if you can give a little hint how to trigger notification. :slight_smile:

749

Can someone reach out so I can go into detail without saying too much on the forum. Iā€™m right there I can tell.
Got user
I know the RCE and I got it half working, like I got stage 2 to show up even with a custom nameā€¦ but not stage 1, and I canā€™t figure out why

750

Guys I canā€™t login to PRTG with found admin credentials. Itā€™s an error during login.

751

Please stop resetting the box. Iā€™m working on root and Iā€™ve had the box reset at least three times in the last five minutes. If you got root, just delete your work. Thereā€™s like two items you would need to delete: one from shell, one from webapp. If youā€™re not working on root, thereā€™s no reason for you to reset the boxā€¦

752

Anyone Help me with the Commands to get ***t.txt from the Notifications field.

753

Iā€™ve got a quick question! I think Iā€™ve done everything needed to get root. Iā€™m just lost as to where to type the credentials in to access the root.txt on the server. These are admin credentials for the SYSTEM so typing them in the f** didnā€™t work. Iā€™m so close! Would appreciate any help!

EDIT: Ahh I got it now.

754

Hi, how can we get a shell from ftp server? can anyone please tell me

755

My 2nd box. Thanks for the creator, great one! PM me if you are stuck, happy to help.
BTW.: Am I the only one, who got the root by exploiting and creating something in the box? :astonished:

756

Guys I am stuck in the ftp shell, o know we have to use the RCE, but I am just not finding the credentials, can anyone please help me?

757

PM me if you need help
Especially NOOBIES

Cheers!

758

Tips for newbies like me:

  • ls -la helps
  • Look at the edit date of C* file
  • CVE for privesc
759

Do people keep changing the password of the web app login account?

760

Thanks to the creator of this machine nice and very much practical scenario. Thanks.

761

Could i message somebody looking for a bit of advice? Iā€™m at the point there Iā€™m running the E***** on the admin panel and itā€™s generating a new user but the user doesnā€™t work. Just need a bit of advice.

762

Tips:

  1. Brute-forcing, a waste of time.
  2. PRTG credentials. Look at what the configuration was, but remember time has passed since then.
  3. User is a no brainer. Simply look around.
  4. (PRTG Command Injection ā‰ˆ Packet Storm) should guide you towards root. Good reading.
  5. Only 2 of the open ports are of use.
    **** Annoyance ***** Box resets. Be patient and it usually best to try to login straight after the box reset.