Official Worker Discussion

Official discussion thread for Worker. Please do not post any spoilers or big hints.

Keep up the good work and hope you all will have some fun!

man, this one’s so hard, I can’t even nmap it. must be built by ninjas!

first blood attempt. don’t think i’m there yet but the excitement of going after it will be fun i’m sure. good luck everyone

@BINtendo I feel you there, lol. I’m gonna see about a first blood attempt myself. I’m not sure if I’ll be that good yet, but it’s good practice. I’m testing for OSCP this upcoming Friday, so this should be a very interesting look for me to see where I am at with the methodology.

machine not responding to ping?

any one who reached to auth prompt page ??? any nudges

People just killing the machine with bruteforcing which is not needed at all

Yeah, kinda ridiculous. I found a way to obtain some files, and also found a URL that requires creds. But I am not exactly sure where the creds are located, if they are in the files I obtained through a certain service. Any nudges for that piece? I think I have a database too but not sure if that is where I locate the creds. (Not sure what’s considered a spoiler or not, so please let me know if I am saying too much. Just PM me)

i found something interesting, started digging but im out of time. user blood gone. congrats it was fun.

got some files from s**s**** , two new hosts , a username , a login page and a database. Stuck here. I think there is a password somewhere but i’m not able to find anything.

are you guys using Kali’s built in wordlists? 'coz I’m not getting any luck there

Hey all. I would appreciate a nudge. I found the file. I got a password. Im able to add file, then commit, but cant find a way to use the file once on the web server! Always 404, file not found! Any hint on what im missing?

Type your comment> @gverre said:

Hey all. I would appreciate a nudge. I found the file. I got a password. Im able to add file, then commit, but cant find a way to use the file once on the web server! Always 404, file not found! Any hint on what im missing?

pr, merge, build

Type your comment> @gverre said:

Hey all. I would appreciate a nudge. I found the file. I got a password. Im able to add file, then commit, but cant find a way to use the file once on the web server! Always 404, file not found! Any hint on what im missing?

I am really struggling to find that file , found a lot of files through svn **** but can’t find any password. Any nudge?

@LegendHacker said:

@gverre said:
Hey all. I would appreciate a nudge. I found the file. I got a password. Im able to add file, then commit, but cant find a way to use the file once on the web server! Always 404, file not found! Any hint on what im missing?

I am really struggling to find that file , found a lot of files through svn **** but can’t find any password. Any nudge?

You should look at the man page of the command that you are using, a little parameter may do the trick :wink:

OK im gonna try, thank you so much!

Found the username and password, but they are not working with de****.w***.h**

Type your comment> @D8ll0 said:

Found the username and password, but they are not working with de****.w***.h**

Remove Burp Proxy :slight_smile:

That worked actually, thanks

I got the same problem. Got the good creds, can login in svn, but not on that dev**** page. I even reset the box. How have you resolved your issue?