Use cURL from your Pwnbox (not the target machine) to obtain the source code of the "https://www.inlanefreight.com" website and filter all unique paths of that domain. Submit the number of these paths as the answer

HTB Content Academy
1

Use cURL from your Pwnbox (not the target machine) to obtain the source code of the “https://www.inlanefreight.com” website and filter all unique paths of that domain. Submit the number of these paths as the answer.

the right command it’s this
curl https://www.inlanefreight.com > htb.txt && cat htb.txt | tr " " “\n” | cut -d"‘" -f2 | cut -d’"’ -f2 | grep “www.inlanefreight.com” | sort -u | wc -l 2>/dev/null

first do a curl and redirect the output to htb.txt and(&&) use a cat to htb.txt and the rest is filter

if you don’t know what it’s a path in a domain:
For example, in the url https://cloudflare.com/learning/,cloudflare.com is the domain name, while https is the protocol and /learning/ is the path to a specific page on the website

13 Likes
2

hey how did you come up wit that

2 Likes
3

paying attention to the units,reading a lot

1 Like
4

clever, and conveniently gives the right result! But be careful parsing different encodings and query strings - this misses one but double-counts another for the win. Note https://www.inlanefreight.com/wp-includes/js/wp-emoji-release.min.js?ver=5.6.9

5

let x= 0

function guesser(){
document.getElementById(“answer430”).value = x
document.getElementById(“btnAnswer430”).click()
x+=1
}

setInterval(guesser,1000)

1 Like
6

I’m working on that challenge right now and use similar grep filtering options but seems I’m not getting there. I used yours as well but it doesn’t work. Did you manage to get the correct result with that command?

7

yes, I get the right result are you sure you paste it right?

1 Like
8

It worked for me finally yes. Thank you

9

Doesn’t work for me…

1 Like
10

hi @drgtn welcome to the community, try to understand the command., you don’t have to use that particular command if you get to understand what its happening there you will be able to get the answer by yourself

1 Like
11

Solved. Thanks.

12

This shorter version worked for me:

curl https://www.inlanefreight.com | tr " " “\n” | cut -d"‘" -f2 | cut -d’"’ -f2 | grep www.inlanefreight.com | sort -u | wc -l

Thank you for the hint anyway. I was overwhelmed at first, but now it’s totally comprehensible.

7 Likes
13

why we are using tr command here?

14

Yeah i got it just new line for space, sorry for bothering you

1 Like
15

If you are used to using regex, then you don’t need to use so many commands - grep can handle all the filtering for you:

curl https://www.inlanefreight.com/ | grep -Po "https://www.inlanefreight.com/[^'\"]*" | sort -u | wc -l

12 Likes
16

Working Cool

17

Could you clarify what you did on that grep filter? I am new to this, I would like to understand what [^'"]* this does.
Thanks!

18

Sure - but bear in mind that it’s not been covered in the material, I was just saying if you already know regex then you can use that instead.

[^'"]* means any character ([ ] lists characters) that isn’t (^ = isn’t) a ’ or a " . The * at the end means match if there are 0 or more of them.

So basically what that expression is doing is searching for https://www.inlanefreight.com/ including all characters after until it reaches a ’ or a " (which would be the closing of the anchor link)

We need to check for both ’ and ", as some of the links are written:
<a href='https://www.inlanefreight.com/'> and others are written <a href="https://www.inlanefreight.com/">

19

could not resolve host comes up after few seconds.

21

It should be more like grep -Po "https?://www.inlanefreight.com[^\"'?#]*" shouldn’t it ?
The url path ends at the first ? (query parameters) and # (fragment). Thus the correct answer should be one less.
(https://www.inlanefreight.com/index.php/wp-json/oembed/1.0/embed is present in the result with different query parameters)