Official MonitorsThree Discussion

Maybe check the encoding? I got it to work, send me a DM

If you are using firefox, go try on chrome. It worked for me on chrome. Firefox for some reason, gave me quite a rage!!!

i need help with nonce thing, trying for few hours and each time unauthorized !!! is the machine bugged or what
EDIT: i am an idiot !

I got a question, I was able to found the c*** subdomain because of a nudge, but I wanted to know how you guys found it, It’s impossible to bruteforce it since we need to enter this domain before in the /etc/hosts file right ? so how can you enum on this ?

Thanks

Is the created account for permissions suppose to hit a denied permission page when attempting to login into the new account?

Nevermind found a different CVE that bypassed that step.

can someone help where are default creds :smiling_face_with_tear: :smiling_face_with_tear: :smiling_face_with_tear:

If you use a particular wordlist with gobuster then it will reveal the subdomain!

It’s all about enumeration, if you can’t find something on your initial search you got to dig deeper.

yes i have too

I’m sorry i cant seem to find the right list… i’m using rockyou

for what ?

I followed a related Medium article to bypass duplicati, but I still get an Unauthorized error. I’m not sure what I did wrong.

Thanks gobuster solved my problem :slight_smile:

I cannot find the right m***** key to log in to the machine. I grep it and I found one in pki folder, but it didn’t work. Any hint?

Anyone else think root was a bit complex or was it just me ?

1 Like

Hi, can you help me, please?

Same here. Curious to know if anyone got a shell?

(post deleted by author)