Official Unbalanced Discussion

Spoiler Removed

just found the hidden space… fun box so far

Finally rooted.

Thanks to @MariaB, @AidynSkullz and @TazWake

Got a password but don’t see the login page everybody is talking about, could anyone please pm ?

Getting the user was pretty cool.
Excellent box, I learned a lot of new things! :smiley:

is that login supposed to work?

@iampachinko said:

is that login supposed to work?

It depends. If it is that login, yes. However if it is that login, then no.

Spoiler Removed

At first I thought that SneakyMailer was a nightmare. But then I saw Unbalanced…
10/10, got PTSD from this box.
Thanks to @M0r7iF3r and @bdadoo for pulling me out of rabbit holes.
DM me if you need a hint.

So far I have not used to comment, but I have to say that @polarbearer and @GibParadox you have made an awesome machine, it has been a lot of fun and I have learned a lot.

And many thanks to @TazWake and @6h4ack for the help.

If anyone needs help, I will be happy to help!

so far this box is awesome, 10/10 reallifeLIk3 , its always about learning

Amazing box, one of few hard boxes I have obtained. Thanks everyone for help :).
DM for hints, while it is fresh :smiley:

@polarbearer @GibParadox thanks a lot for this fantastic machine! I learned some new things and will give this “hole” thing a try on my home network … Also the other technologies were super realistic!

Type your comment> @TazWake said:

After that you find a fairly traditional attack. It just takes forever to complete to get to user.

any way to make that “traditional attack” to go faster?

@iampachinko said:

Type your comment> @TazWake said:

After that you find a fairly traditional attack. It just takes forever to complete to get to user.

any way to make that “traditional attack” to go faster?

It can be scripted which is a lot faster.

Type your comment> @iampachinko said:

Type your comment> @TazWake said:

After that you find a fairly traditional attack. It just takes forever to complete to get to user.

any way to make that “traditional attack” to go faster?

You can use BurpSuite Intruder to speed things up.

@iampachinko said:

@TazWake said:

After that you find a fairly traditional attack. It just takes forever to complete to get to user.

any way to make that “traditional attack” to go faster?

Scripting is definitely the way to go

Man finally got user! Attack takes a lot of time, scripting certainly helps
Thanks @TazWake!

Type your comment> @4t0ys3d said:

Type your comment> @iampachinko said:

Type your comment> @TazWake said:

After that you find a fairly traditional attack. It just takes forever to complete to get to user.

any way to make that “traditional attack” to go faster?

You can use BurpSuite Intruder to speed things up.

I felt intruder was slower than the script, but again i stopped intruder midway so I can’t really say. Anyway writing that script was fun

@iampachinko said:

Type your comment> @4t0ys3d said:

Type your comment> @iampachinko said:

Type your comment> @TazWake said:

After that you find a fairly traditional attack. It just takes forever to complete to get to user.

any way to make that “traditional attack” to go faster?

You can use BurpSuite Intruder to speed things up.

I felt intruder was slower than the script, but again i stopped intruder midway so I can’t really say. Anyway writing that script was fun

If you have the paid version, burp can be less painful. If you are on the free version, it takes a looooong time on this step.