Official IClean Discussion

HTB Content Machines
1

Official discussion thread for IClean. Please do not post any spoilers or big hints.

2

Roll up your sleeves and clean house on iClean! Ratings and reviews will help me get better and come back with trickier challenges.

2 Likes
4

Just rooted.
Not too difficult, Google will help you every step of the way.

1 Like
5

Just rooted.

User hint: First of all think about client-side web vulnerabilities.
Root hint: Do something with attachments.

1 Like
6

Found a way to gain access but still unable to exploit it. Im trying to figure out how to obtain the shell. I tried several things on that attack vector.

7

Just rooted, I want to share a little nudge: for user to get revshell when you have found the s*** vulnerability be careful with encoding see some hexamples on google :wink:
For root just read what you cannot read.

8

After you generate one invoice you cant change the details for any other invoices you create after that, even if you enter new details… It only works if you reset the box… Is this a bug or is this supposed to be like this ?

9

Spent a lot of time trying to troubleshoot “Match and replace” function in burp to add a header to every request and then found out I wasn’t seeing the proper response for the page because it wasn’t in fullscreen so there’s a tip I guess.

Great machine, I’m stupid.

1 Like
10

Stuck for most of the day today. If I may ask, does this have a subdomain? I can never get the subdomain right with the htb boxes.

11

dont enumerate, just try to understand the mechanism of how the app works, you already have almost anything you need

12

Finally pwned! @samushi gave a good tip. I wasted a lot of time testing and enumerating a lot of things.

You have to enumerate everything on this machine.

Learnt new cool things :slight_smile:

13

Does anyone have any hint to suggest for user?
I spent more time in enumeration but nothing useful found :cry:

14

It can be a bug, but it’s should not come in your way to exploiting it

15

Hint - Check if you see your reflection! :mirror:

1 Like
17

I have reflection but the c***** value could not appear :cry:

18

image
image704Ă—644 106 KB

1 Like
19

Rooted - fun box! Feel myself getting better and better, thanks htb.

foothold - check all the inputs.
user - enumerate the application - think about best practices.
root - think about what you have and what you can do with it..

1 Like
20

Congratsss :partying_face:

1 Like
21

I have been trying alot of different payloads, I would get reflection but no cookie. Any advice?

22

Try IMG payload with “onerror”