Official Blazorized Discussion

HTB Content Machines
22

any hint for root ?

23

So, I generated a token for the other site but it doesnā€™t want it (I know it works as I can call the normal API with it) - am I barking up the wrong fire hydrant?

25

The BAPP extension truly is the key to enlightenment if you are stuck trying to convince the site to give you privileges.

3 Likes
26

Right!? I was accompanying it and was likeā€¦ ā€œThis isnā€™t rightā€¦ user in 30 minā€¦ might be a platform issueā€

2 Likes
27

Stuck on nu_**** user, any nudges on privesc?

28

I have the token and works for the api, but when i send it as a header to the admin returns an error, could someone give me a hint how to find the cookie or local storage variable name?

1 Like
29

I donā€™t understand how to create valid jwt. It requires secret, isnā€™t it? How I can change payload if I have no secret?
Also how could you know local storage key that admin panel needs? I researched itā€™s js to find it but have no results. Tried to decompile dll but idk how to do it better, Iā€™m using linux so running with ā€˜stringsā€™ command, I donā€™t want to install all this .net sdk.

31

As mentioned earlier by someone else: vscode + ilspy-vscode plugin. Then download and look at DLLs with a name ā€œBlazorized.*ā€

32

Ok, Iā€™ve got token values to generate but I still canā€™t find local storage key to use. I tried all default values such ā€œaccess_tokenā€ etc. but adminā€™s js still does not includes it to request headers.

33

Try the obvious keys.

You can Fuzz it but a simple manual spray should cover.

1 Like
35

its a windows box, look at the ports that are open and think about what services are vital to specifically windows environments. I believe someone has already mentioned the service.

36

you know the variable name

37

Yeah but I though we need admin panel access to use some form xss on mssql mb.
I get stuck there to be honest -_-

38

Yes, but I forgot that was case sensitive, thanks

39

Pc Rage GIFs - Find & Share on GIPHY

This is me this whole box. LOL

4 Likes
40

1 Like
41

Feel free to DM me if youā€™re still trying to figure out what to do from nu account.

42

Anyone got any hints how to move from user NU****, nothing seems to be working for me

43

I generated the jwt but how am i supposed to use it? I supplied it in the header and it does not log me in to admin dashboard? Can someone give me a hint plz?

44

how to extract dll files ?