Nice box, finally rooted.
Type your comment> @IgorLB said:
Exploit is correct) Try another source to download it.
Thanks for the box.
I’m feeling so stupid rn. I had this exploit from the beginning but didn’t bother reading the code. Just read the exploit code and now I’m one step away from user. Thanks for the pointer <3
I’m getting a 503 is Magento down for anyone else?
Type your comment> @Ap3x said:
I’m getting a 503 is Magento down for anyone else?
been getting that all day, about 1 minute after a reset it comes back. I assume someone is constantly bricking it.
Nice box, I enjoyed it. But I have to say it. Why do people upload their reverse shell in index.php? It’s kinda stupid tbh, you stop everyone else and, of course, other people will reboot the box so your shell will die. Anyway if someone wants any hints, pm me.
wow finally got root.
Here are some hints:
User: There are many exploits out there but only one will work which needs a very small modification, so be sure to check the source code and try 
Root: ezpz. everything is in front of your eyes.
That’s all. May the 503 and resets be with you!
not sure if ive found creds for magento admin, seems to be a key and a password for the login, not coming up with any format that i can use the key aginst the password to decrypt it though, any advice?
Still trying to get a user shell. Can I PM someone with what I’m currently doing to see if I’m on the right track?
Type your comment> @MarkHalberstam said:
Still trying to get a user shell. Can I PM someone with what I’m currently doing to see if I’m on the right track?
Gimme a shout if you still need help verifying
Pwned the box! Thanks, @ch4p for great Linux box. I’ve Learned a lot about Magento in the initial foothold! Feel Free to PM me If you guys got stuck. The PrivEsc part is easy one.
Can someone dm me about s**o problems?
nvm; i wasn’t understanding syntax… smfh lol awesome sauce
Type your comment> @zauxzaux said:
nvm; i wasn’t understanding syntax… smfh lol awesome sauce
SAME! lol. I read it as if it was delimited -_-
Hey, folks, I’m new. Somebody could give me a push to get started.
Greetings
Type your comment> @noobsaibot81 said:
Hey, folks, I’m new. Somebody could give me a push to get started.
Greetings
Load up nmap and do a scan of all ports and services running on these ports.
i have a script that i run yesterday and it worked, now i run it, it says it works but i cannot login. Please someone pm and tell me what im doing wrong!
Type your comment> @thewildspirit said:
i have a script that i run yesterday and it worked, now i run it, it says it works but i cannot login. Please someone pm and tell me what im doing wrong!
Chances are you used it and didn’t really work… Even though it reports it did. And someone else used it (after modification)and it worked correctly, and by chance you got in with the same creds.
@DameDrewby tell me about script i don’t find cred wtf???
Need help with priv esc. Someone please message me.