mxchai

About

Username
mxchai
Joined
Visits
8
Last Active
Roles
Member

Comments

  • Thanks @seepckoa I'll run with that and see how it goes
    in SecNotes Comment by mxchai August 2018
  • Would be nice if someone could PM me about the initial foothold. I have no idea what to do except testing the web app, of which I found only XSS. Thanks!
    in SecNotes Comment by mxchai August 2018
  • Would really love a PM regarding how to get a user shell. I have discovered a vulnerable service running on the box, but the exploit script I found does not work. It tells me that the commands have been executed, but I'm pretty sure they have not be…
    in Canape Comment by mxchai August 2018
  • Any hints on enumeration wordlists? Tried the IIS related (hope this isn't spoiler) wordlists inside SecLists and all I got was a forbidden directory.
    in Bounty Comment by mxchai June 2018
  • I have currently achieved RCE and done a bit of exploring. Only managed to find the user's name, and 1 credential which I could not find a use for. Can anyone drop me a PM to nudge me in the correction? Thanks!
    in Stratosphere Comment by mxchai June 2018
  • If anyone can PM me about scanning the target, that would be nice. I have no luck with the scans. Thanks.
    in Chatterbox Comment by mxchai May 2018
  • (Quote) It clicked once I saw "find ones that are generally not present on HTB boxes". Thanks!
    in Valentine Comment by mxchai May 2018
  • If anyone needs a little nudge, feel free to PM me
  • (Quote) It's not always the case that the user.txt is in ~. I've seen cases where the file is located in ~/Desktop/ or ~/Documents/. I think it's just that user.txt won't be anywhere too far away from ~.
  • (Quote) This is actually something I fully agree with. Even picking out the good hints from the forums can be a good skill to have. The clue that helped me the most was the one about running services. It might not be obvious (which it certainly was…
    in Poison Comment by mxchai May 2018
  • I managed to find the default login. Sorry for posting too hastily.
    in NIbbles Comment by mxchai May 2018
  • I've read through the whole thread but still couldn't log into the web application. If anyone could give me some hints, please PM me. Thanks.
    in NIbbles Comment by mxchai May 2018
Avatar

Howdy, Stranger!

Click here to create an account.