Official discussion thread for Reel2. Please do not post any spoilers or big hints.
20 minutes live…still host unreachable, no ping nothing…dead? whatthe…???
It doesn’t release for 39 minutes according to the machines page.
gotcha! Thank you
Very quiet in here
Well, I need a break from Intense so I guess I’ll join come the fun. I feel like I’m so close on the SQLi for that box and just ever so slightly off. Maybe after a break I will be able to think of something.
Hard box to get foothold, found some things but all seem deadends so far.
Type your comment> @SanderZ31 said:
Hard box to get foothold, found some things but all seem deadends so far.
Same here.
Will this involve installing some random software that isn’t normally installed on linux/kali/whatever to access something? It’s the only lead I have at this moment.
Edit: I don’t think that’s it. Lol. I have no idea.
There’s a hidden site - still not sure if it’s a rabbit hole but the source code is online so it’s at least halfway easy to maybe find a foothold there…
Stuck, any hint would be welcome.
From the looks of it only 8 users have user so far. 
hmm
Wonder if /supbx is the way in?
some kind of SL wizardry …
I successfully implemented a cookie stealer utilizing hashtag.php. So far, only snarfed my own cookie. The only place I can even get an href to render properly is my profile website. 
I don’t think this is a spoiler because it helps with absolutely nothing, more like a “don’t waste your time” spoiler.
Type your comment> @Zot said:
I successfully implemented a cookie stealer utilizing hashtag.php. So far, only snarfed my own cookie. The only place I can even get an href to render properly is my profile website.
For get a cookie just go on inspection browser and then on console and write “window.cookie” or tab storage cookie
well… now that i have creds, i feel even more lost than before.
Wtf winrm? rabbit hole? I have valid credentials :neutral:
Type your comment> @zer0bubble said:
well… now that i have creds, i feel even more lost than before.
As in you made yourself an account, or found some somewhere?
Edit: I don’t speak this language. I don’t think I need an exploit, per se.
Edit: If anyone is on here that has gotten a foothold, am I supposed to chase the “bad” exploit, or am I way off base?
Love the Swedish\Scandi names @cube0x0 
enter in the wastant messenger so what to do now!! tried everything to get the shell!!
bot no use!!
Got creds to something (not the social media site), and I think I know what I’m supposed to do, but everything I’ve tried so far hasn’t worked. And I’m about to throw in the towel.