Official BoardLight Discussion

I tired a few s*** exploits. Nothing works, even tweaking them. I must have been doing something wrong. Is there any good soul out there to DM me and give me a nudge?

is using the filter -mc 200 wrong here

Use ffuf and do -H “Host: …” i was doing “HOSTS:…” when i changed it it straight worked. Can someone tell me if HOSTS is generally wrong because i have been having issues with vhost fuzz ?

GG

because the header HOSTS doesn’t exist in http, (not sure)

You must be doing something wrong.

Paste command you are using to find subdomains

My tips to compromise the machine.
User: If the website you landed is static, try to search for other websites with more code.
Root: This Privilege Escalation technique shouldn’t be executed in a real-life scenario since you might crush the system.

P.s.
Please delete your files when you are done

I finally was able to tamper with the exploit enough to get the root flag, but I never really “fixed” it per se. I’m curious to know what you did to fix it, if this isn’t too far removed from your memory. DM me, if you’re open to discussing.

If anyone needs a nudge in the right direction you can dm me :slight_smile:

Hello was able to get shell. Currently on w**-d*** user. Was able to find another user named l******. Currently stuck. Any clues or tips?
Was able to access the database also but can’t seem to find any interesting there. Cracked a**** user, which was previously used for initial foothold. The other user, d*******, can’t crack (thinking that i may not use this user though).

Hi!
I’ve got the same problem and I tried your solution but it didn’t work for me. Did you find out what was the problem? Because changing VPN server unfortunately didn’t help me :frowning:

The knowledgeable crew at George Wizard Recovery Home was able to find my stolen Bitcoin and get it back. They were successful in doing this due to their in-depth knowledge of the bitcoin sector and the most recent hacking methods. I was afraid of falling victim to scams involving cryptocurrency recovery because I had heard of them. However, George Wizard Recovery Home was unique. All along the procedure, they were open and truthful.George Wizard Recovery Home helped me get my Bitcoin back, and I was really appreciative. They were capable, successful, and professional. I heartily urge anyone who has misplaced their cryptocurrency to employ George Wizard Recovery Home through: georgewizardrecoveryhome AT gmail DOT com or WhatsApp :+1 (908) 768-4663