Official Shoppy Discussion

HTB Content Machines
1

Official discussion thread for Shoppy. Please do not post any spoilers or big hints.

1 Like
2

Rooted the machine. Figuring out what is running is the biggest hurdle for this box. Then the box has a straight-forward path to root.

3

Rooted! This is one of the great machine to learn a new ***1nj3ct10n technique.

5

Rooted. Pretty straightforward box.

6

to be exact, *****1nj3ct10n

7

a small hint: try enumerating with different wordlists.

2 Likes
9

Actually a usefull one :slight_smile:

10

The foothold was kinda confusing

11

well… just be patient and check twice :wink: )

12

Found the login page but I have tried every payload/encoding or WAF bypass under the sun and it still just hangs. Am I in the wrong area or missing a step?

4 Likes
14

Is there expected behavior when you try to inject? What types of databases do you know? Try to use what is in shadow, not only under the sun :slight_smile:

15

Soo… this is one of my first ones. I hit it with hydra and dirbuster is that the right direction?

16

Rooted! It is a very interesting and straightforward box!

18

hi
noob here can anyone help me get a foothold? ive found the hidden dir m…m… but cant access it. Im thinking there is some sqli here but dont know what to do can someone please help
thanks in advance

19

This was a nice machine… in my opinion there are actually 2 hard things about it.

  1. Figure out what is running
  2. Discovering where you can use the juicy info (i runned this kind of scan just as a last resort… after i started banging my head what i am maybe missing… lesson learned always do all kinds of enumeration and dont assume anything :smiley: )

If anyone gets stuck, just send me a PM

3 Likes
21

can someone help me with rooting this machine. I am new to this

22

bro can you help what to do, i am new to new

23

Yep just ping me on a DM

24
  1. Foothold
    → Enumerate deep what is given first hand.
    → Do not stuck on single type for bypass.
  2. Deep enumeration & bypass gives way to user shell.
  3. Just follow what user is allowed to do.
25

Was there a way to figure out bypass without doing trial and error for 4 hours? All the other steps for this box was like 1 minute each.