There is no Magento Connect Manager login page. I get '/downloader/ was not found… ’ when I try to connect to it from the Magento Admin page’s drop-down menu.
Is it disabled on purpose or has it been tampered with?
There is no Magento Connect Manager login page. I get '/downloader/ was not found… ’ when I try to connect to it from the Magento Admin page’s drop-down menu.
Is it disabled on purpose or has it been tampered with?
I believe downloaded has been disabled because it broke the box for everyone else. The working method has been mentioned many times in the thread
Rooted! Thanks to @Hackbot1x, and so to return the respect, if anyone needed a nodge or hint, pm me. FYI: I learn many new things from this box, very challenging if you are not reading the exploit correctly. I struggle from the get-go but managed to access the A*** P***. Then got stuck there for days (esp. after the downloader was taken off), and read the forum here over and over and finally asked hint from @hackbot1x. Have fun with, don’t let the frustration gets ya, you will succeed in the end.
There is no Magento Connect Manager login page. I get '/downloader/ was not found… ’ when I try to connect to it from the Magento Admin page’s drop-down menu. I cant continue.
I can’t seem to create my own creds, I can get in using the default creds that the exploit creates, (I’m guessing this is from someone else) but if I change the username to something else I can’t log in even though the exploit says it worked
Any hints for getting this working? I’ve tried a couple different copies of the exploit from exploitdb and github but have the same result
I’ve been trying to get user access in 2 days, with no success.
I successfully got in the admin panel in short time, then, I spend just so much time to use things that should have worked (according to previous comments in this forum):
tried to use the downloader → it has been removed
tried the python script with the POST request → getting the weird error with “tunnel = tunnel.group(1)”.
Honestly, this is getting just frustrating.
If anyone has any idea of how to make work one of the mentioned things, please let me know
Got user flag and I’ve been wrecking my mind for the past 2 days on getting root flag. Needs help…And i’ve got only a non-interactive shell. Suggestions on getting interactive shell will help me alot.
HELP ME ON GETTING ROOT.TXT…Did everything that I knew…