Well this was interesting. The user had layers and layers, like Shrek… i mean onions. The root on the other hand was just… getting it. thanks @rotarydrone
@rotarydrone awesome box, I really loved the process and the design, plus learned some more, which is always nice.
Hope to see another box of yours soon
I am currently in Jail, found creds for DB and don’t know where to use it (they are not usable in G***). I changed the SQL statement in the file I found. to enumerate databases and tables, but no success so far.
Rooted.
Initial was tricky, but after that getting user.txt and root.txt took me about 30 minutes - probably because I spent way to much time reading all source code.
PM me for a hint.
I am stuck at the jail. Already got the credentials, all three of them, but I have no idea where to use them. Already tried SSH and looking through their gogs repos, but nothing worked. Can Someone please give me a hint?
I thought you were really in the can cuz your avatar almost looks lke a mugshot
Can anyone plz tell me why i cant seem to access the api or gog pages? They are returning as Server not found… Ive edit my /etc/host/ file to reflect both name resolves but still nada, im at a bit of a loss. Can anyone help me on this?