trollzorftw

Activity

• 
  Fcvebf → trollzorftw

  Hi my friend,
  I saw in the forums you rooted Mango. PLease if you can give me a hint it would be very helpful

  • I have found http://staging-order.mango.htb/index.php but fuzzing with SecLists/Fuzzing/special-chars.txt username and password gave exactly the same responses, same length. Also tried nosqlmap importing the login request from a burp saved file and still nothing. Is this the vulnerable page? What am I missing?
  • ALso what is this "under construction" page other member talk about??? :-/

  Any help is a lot appreciated

  Multumesc!

  November 21
• 
  terty → trollzorftw

  Hi, I'm trying to exploit Postman but i can't. I try the redis exploit but then ask me for password and i don't have it. I tryied to burpsuite 10.10.10.160:1000/password_change.cgi but the burpsuite dont intercept packets from 10.10.10.160.

  I try redis-cli but i cant take de PW. Can you guide me pls?

  November 20
• 
  Naveennguyen → trollzorftw

  Hey man, I'm working on Postman. I have enumerated and tried the ssh method in Redis. But it is not working. not sure where am I making mistake?

  November 5