riceman

About

Username
riceman
Joined
Visits
139
Last Active
Roles
Member

Activity

  • all

    Hey man, any nudge on the crosfit2 box? I have extracted some info through sqli. sqlmap is slow and wanted to use dns exfil, but unbound not forwarding dns requests to my box, so perhaps thats a rabbit hole. Token reset seems t be another rabbit, hole. There is crossfit-club.htb with apis (Express with pug) but I can't see yet where I can do any injections there...
    Reading redis.conf is almost impossible w/o dns exfil as sqli is too slow to get that whole file out.
    Am I on the right track?

    April 3
Avatar

Howdy, Stranger!

Click here to create an account.