Don’t get too much stuck on the creds you find, look for “better”.
Currently stuck on root, I’m pretty sure it has to do with all those logs but not sure how.
i’m stuck on root too, i think i’ll need to symplink stuff with other stuff to get the job donn
For people having problems/getting nothing after getting creds : yeah they can be useful somewhere but you must enumerate and read some files to better understand where you can use them :). You should wonder why there are creds here and for what they are needed/supposed to do
Sorry if I say too much, it’s my first time giving my opinion and advice here xD
Initial: Fastest foothold I’ve ever got. 2 steps to get an easy shell.
User: Read files carefully, ignore rabbit holes and RTFM.
Root: You should spot the method fast, try it locally to understand how to make it work.
Finally.
Foothold: DDoS? Really? Check the description before run something!
User: check that same place where you’ve found those creds. Make yourself familiar with capabilities of the service and ask yourself what permissions should you have to view that content.
Root: was mindblowing for me. It’s right in front of your eyes once you logged in, but you just cannot violate args. Fortunately, there is a way to substitute one thing with another and use the same command to get a shell
Finally got user thanks to @D3Fix and @olsv . As always something stupid i missed, also found cheetsheet and read it and found another way to get there. funny