NIbbles

@opnsysme said:
I found the login page, but this is my first machine, and dont know the normal “usid/pwd” combo’s on this site. I have also run CEWL and the patator with the generated list no luck. If anyone would be willing to help me out I’d appreciate it

The credentials are pretty basic. Look out for default user/pw combinations and strings you have most likely seen before.

@fame321 said:
need help with rooting . I got user.txt. but not able to get root.txt

Enumerate. Search on the common linux enumeration scripts and try to execute them on the machine to see what loopholes are there.

Watch IppSec’s videos. He always uses them.

Nibbles rooted, learnt a lot a lot from this box

Enumeration Enumeration Enumeration

Any hints needed anyone can DM me or can hit me up on discord at [Ruthvik#7626]

Good luck Everyone !!

Well this is frustrating. I got the login form and tried my best to guess id and pwd with no luck. Some help will be appreciated. This guessing game makes me insane.

if somebody needs any help pm me

@opnsysme said:
I found the login page, but this is my first machine, and dont know the normal “usid/pwd” combo’s on this site. I have also run CEWL and the patator with the generated list no luck. If anyone would be willing to help me out I’d appreciate it

Got the uid/pwd, now trying to get shell. Thanks @codenameroot

I am not able to run the sh file getting error Unknown command. Can somebody help me.

Even if I am running most of the command I am getting Unknown Command error, and Yes I have resetted the machine and tried again.

If anyone needs help, feel free to PM me. :slight_smile:

I’v tried everything, can’t find user/pass for the admin page. I’ve been on it for four hours… and I’ve read so many posts…

I’ve used cewl to generate a wordlist from the blog page and the login page… Can I have some help please?

@trodix said:
I’v tried everything, can’t find user/pass for the admin page. I’ve been on it for four hours… and I’ve read so many posts…

I’ve used cewl to generate a wordlist from the blog page and the login page… Can I have some help please?

Dont over think this. This has very weak combinations. Username wise think of the most common username like the usual defaults. Password wise think about it since it is weak. What does it mean by very weak?

@cExplr said:

@trodix said:
I’v tried everything, can’t find user/pass for the admin page. I’ve been on it for four hours… and I’ve read so many posts…

I’ve used cewl to generate a wordlist from the blog page and the login page… Can I have some help please?

Dont over think this. This has very weak combinations. Username wise think of the most common username like the usual defaults. Password wise think about it since it is weak. What does it mean by very weak?

Found it !

if someone needs any help pm me

@stevv said:
if someone needs any help pm me

I got user just struggling to get root. I used the exploit to get user but need help on root. Having trouble privesc and need some pointers

OK so no DH , but can we not reset the machine every 5 minutes? Some of us (me) are either slow typers or have slow connection. I just get ready to get a shell or try and the connection is reset

Finally got root!!! Ya so I might be smacking my forehead!!

@cExplr said:

@trodix said:
I’v tried everything, can’t find user/pass for the admin page. I’ve been on it for four hours… and I’ve read so many posts…

I’ve used cewl to generate a wordlist from the blog page and the login page… Can I have some help please?

Dont over think this. This has very weak combinations. Username wise think of the most common username like the usual defaults. Password wise think about it since it is weak. What does it mean by very weak?

P.m me plz to help a bit!

can someone pm me login credentials, i cant find it. tried cewl etc.

Machine rooted!!, very interesting one

sooooo Im looking at the directories and I dont know what to do any hints on what I should do next?

Anyone need hits (not answer), just PM me. :lol: