Official Caption Discussion

HTB Content Machines
109

Sometimes you can have your cache and eat it too

1 Like
110

That’s the reason I paused solving this box and switch to Portswigger’s LABS where I can find and practice cache cases :wink: In my opinion it will help me to understand this kind of bugs.

Thanks for a hint!

Cheers

111

Nice! No problem. Practice is always good. So is context. This a CTF. It’s a manufactured game. If there’s an extra intermediary somewhere, then it’s probably either opening up a vulnerability or complicating another one

112

hi. i’m having problems with logging in on port 8080. i know what the credentials are but i don’t know why it won’t let me log in again. i’ve already rebooted the machine 2 times.

113

any hint to bypass login in gitbucket?

114

Any hint to bypass 403 to get the /logs file?
I’ve bypassed the Varnish proxy via smuggling attack but the acl rule of HAProxy intercept the request and it could not reach to the backend server to retrieve logs file

115

bro use h2smuggler

117

Is there anything I need to do first before trying to use h2csmuggler? I see some comments about abusing CSRF or XSS attacks, but I can’t stay a method of where these would be used

118

u just need admin cookie

119

I have no idea how to get this cookie with sm*** I try with some X**

120

Feel free to DM on here or discord if you’re still stick. I manged to own this box last night.

To get user was interesting, but the root privexec was so niche.

121

admin cookie with cache poisoning

122

need some help with initial foothold. able to login with ma**o user creds into caption.htb webpage

123

Have a play around with HTTP headers and see if you can find a certain header that is reflected in the page source

124

Anyone around for a nudge? Stuck on initial foothold. done the basics of getting the info from commit history. feel like I keep going down rabbit holes