Swagshop

Im so lost about getting shell after 404 error. Please help! Thank you!

I got root, it’s easy box, but the people here made it harder, I don’t know why they keep reset it. for any help don’t hesitate to PM/DM.

Type your comment> @mavs23 said:

Im so lost about getting shell after 404 error. Please help! Thank you!

What have you done so far? DM me if you need hints

Type your comment> @Freak2600 said:

Same problem as above cant get the downloader to work or the POST. any ideas

DM me if you need hints. But, downloader is not an option. It has been disabled.

Ah! It took me days to finish this. I wasted a whole day cause of a typo. Thanks to @NativePWN for spotting it.

I have done nothing. Tried enumeratin users, but giving false positivies. Pleases help! how to get admin panel.

Took user yesterday, which was nice.
Now going for root.

If anyone need a nudge, PM me.

Usered and rooted yesterday. Interesting box, feel free to pm me if you need help

■■■… Please stop resetting the box, frustrating…

This box is pretty frustrating as its constantly reset. There should be no reason to do this if you are trying for user or root. Trust me you dont need mst for this just use step by step attack with credentials found to upload a s*** and then get user. The RCE’s dont work and are rabbit holes, they my have worked in the past but dont work now.

Is it too much to ask for a more delayed reset like 10 minutes? Are the requests even inserted in a queue?

The box is getting slow…

Its working so slow…

Finally rooted this nasty pieace of CMS! I was starting to get really tired about it, but learned lots of new things!

Type your comment> @bradgcoza said:

This box is pretty frustrating as its constantly reset. There should be no reason to do this if you are trying for user or root. Trust me you dont need mst for this just use step by step attack with credentials found to upload a s*** and then get user. The RCE’s dont work and are rabbit holes, they my have worked in the past but dont work now.

It works. I finished it recently. Keep trying, dont give up!

@StillNoob said:
I have done nothing. Tried enumeratin users, but giving false positivies. Pleases help! how to get admin panel.

check for available exploits online or searchsploit

If anyone has any hints on how to figure out which exploit to use to get a s**** (am already in the a**** p****), plz feel free to let me know. :slight_smile:

Finally rooted this box… beware of flash not loading critical content… lol

This is resetting waaay to much :confused: Know what to do but just can’t get there in time before someone resets it :confused:

Please, leave it alone for half an hour, thank you :slight_smile:

No way for getting root, the approach is pretty clear to me. But some users keep resetting the box.