I think I’ve kind of done this box backwards, but at any rate, can someone tell me what the ■■■■ the secret to the p21 is? I just see messages with what appears to be nothing in it. But we all know this is not possible!
I’ve enumerated the ■■■■ out of the box and looked at some configs, browsed over the h20 port, got some ssh usernames, etc. I guess I wanna do the box right and get this enc file from FTP.
Got root.
People here are mentioning that they got access to d****l, which I never got, before getting root. I’d like to discuss about your approaches and methods! Feel free to PM and educate me
Helloo, I’m stuck in the privesc I can’t find that file with the password of d*****, I’m looking where the cms store the conf settings, but I didn’t see anything, I thought that is .P** file but I’m not sure. Any hint of where should I search?, or any keyword to use grep.
@w0xter said:
Helloo, I’m stuck in the privesc I can’t find that file with the password of d*****, I’m looking where the cms store the conf settings, but I didn’t see anything, I thought that is .P** file but I’m not sure. Any hint of where should I search?, or any keyword to use grep.
Perhaps you are looking at the wrong settings. A Google search will tell you the exact location for the file you are seeking
@w0xter said:
Helloo, I’m stuck in the privesc I can’t find that file with the password of d*****, I’m looking where the cms store the conf settings, but I didn’t see anything, I thought that is .P** file but I’m not sure. Any hint of where should I search?, or any keyword to use grep.
Perhaps you are looking at the wrong settings. A Google search will tell you the exact location for the file you are seeking
I’m looking inside v**/w**/h***/, is these dir wrong???
Can anyone PM me a hint - as far as I can tell I’ve decrypted the .enc file for a password but I have no clue what user / where I’m meant to actually use it…
Would anyone mind giving a nudge on where to find the pw for D*****. Got a reverse shell on the machine and ive looked through any file that i can come to think of.
Thanks
@stigxenon said:
Would anyone mind giving a nudge on where to find the pw for D*****. Got a reverse shell on the machine and ive looked through any file that i can come to think of.
Thanks