kophjager263

About

Username
kophjager263
Joined
Visits
69
Last Active
Roles
Member

Comments

  • @shadow12 feel free to PM me if you're still stuck on that portion.
  • Sure. How far have you gotten? There should be something that sticks out when going through the typical first few steps
  • @whipped, not sure. I found a variety of directories but I'm not entirely certain there is anything of significant value in any of them. I found one file within one of the directories (0 byte) nothing seem to be useful to me at the moment. The entr…
  • WOW, i feel like an idiot... disregard, apparently i didn't drink enough coffee today. Or too much.
  • Still at a deadlock with this one. I have the key and it's a discernible key... makes s3nse and it's in the right HTB{key} format... just not accepting it. I looked at a certain PDF with USB_HID device key mappings and also looked at a certain h fil…
  • @whipped you can use burp suite but you don't need to. I'm stuck in the admin portal. Working on a certain component but haven't been able to get much farther yet. I've enumerated other directories, and limited content within one of those directori…
  • OK well i feel like an idiot. I downloaded that one "thing" i eventually enumerated and saw it wasn't much more than output. Definitely overthought that one way too much LOL.
  • @Ruster, no problem. Sometimes getting a shell is simpler than it seems ;)
  • I find it interesting that it sounds like most people got this enumerating with common.txt wordlist from dirb. Clearly I'm missing something in my wordlist or i'm not getting the right extensions. Without spoiling anything, i've tried 3 very obvious…
  • @Ruster, not necessarily. I overthought this because what i tried initially didn't work, but that was because it's a popular box and "things" get changed sometimes. It sounds like you're absolutely in the right spot, and you likely already…
  • The key on this one is definitely not overthinking. With how much people reset this box and change the password for a particular user, it took me a good 2 hours of spinning my wheels trying to get user & root when the first thing i tried didn't…
  • @Simsor i'm assuming this has something to do with the base file name not being in my wordlist. I'm familiar with CGI and have enumerated all possible extensions along with basically every other type of extension (if you're familiar with extensions_…
  • Same boat. I've run dirtb's big.txt with three obviously useful extensions for a cgi directory and have come up dry. I also, in a last ditch effort, ran wfuzz on cgi-bin/ with dirb's big.txt wordlist as the file base, and dirb's extensions_common.tx…
  • I'm in a similar situation. I was able to extract the key but I seem to be having some issues with character encoding on one of the letters. I have a discernible flag in the "HBC{}" format but when i try to submit it I'm getting "Inco…
Avatar

Howdy, Stranger!

Click here to create an account.