@opt1kz said:
I’m stuck on the second login page as well. I’ve tried:
- Credentials from the first login page, forwards and backwards.
- Bruteforcing the password, with the username set to l**i and the two passwords as usernames.
- Bruteforcing the username, with the passwords from the first login page.
- Bruteforcing both the username and password.
- All of the above with a custom wordlist based on all the words seen so far.
Neither nikto nor gobuster were able to find anything useful on the second server. I do not see any further clues in the log file from when I “took a walk”.
What am I missing?
talk to me on MM. I am with same nick. Can help on this without spoiling fun