siegy22

Mr. Robot CTF

• /robots
• /license (scroll down)
• upload reverse shell in wp
• brute force /home/robot/password
• login as robot
• Privilege escalation using nmap

siegy22

Envizon TryHackMe

Three hints to start:

This is not an empty instance. Imagine that it is/was used and therefore contains user data Currently a note function is under development When looking for code execution on the system, the most obvious way is the best - it is important to understand what the application does

Enumeration

siegy22

Hamlet TryHackMe

Enumeration

nmap

☁  ~  nmap --min-rate=3000 -sV -sC -o nmap hamlet.thm
Starting Nmap 7.94 ( https://nmap.org ) at 2023-09-11 20:04 CEST
Nmap scan report for hamlet.thm (10.10.196.230)

siegy22

siegy22

<template>
  <v-row>
    <v-col xs="12">
      <v-data-table
        :headers="headers"
        :items="ingredients.edges.map((v) => v.node)"
        :loading="this.$apollo.queries.ingredients.loading"
        :server-items-length="ingredients.totalCount"
        :sort-by.sync="sortBy"
        :sort-desc.sync="sortDesc"

siegy22

checking for a BSD-compatible install... /usr/local/bin/ginstall -c
checking whether build environment is sane... yes
checking for a thread-safe mkdir -p... /usr/local/bin/gmkdir -p
checking for gawk... no
checking for mawk... no
checking for nawk... no
checking for awk... awk
checking whether make sets $(MAKE)... yes
checking whether make supports nested variables... yes
checking whether make supports the include directive... yes (GNU style)

siegy22

Run options: --seed 34066

# Running:

.................................................................................................................................................................................................SSS......................................................................................................................

Finished in 47.950620s, 6.5484 runs/s, 20.9174 assertions/s.
314 runs, 1003 assertions, 0 failures, 0 errors, 3 skips

You have skipped tests. Run with --verbose for details.

siegy22

@@ -13,13 +13,7 @@ export default class OrphanAgendaItem extends AgendaItem {
       number: this.number(0),
       notes: this.attr(null, notes =>
         notes.map((n) => {
-          const note = new Note();
-          note.id = n.id;
-          note.annotation = n.annotation;
-          note.public = n.public;
-          note.author = n.author;
-          note.created = n.created;

siegy22

<template>
  <v-menu
    :close-on-content-click="false"
    v-model="show"
    :nudge-right="40"
    lazy
    transition="scale-transition"
    offset-y
    full-width
    max-width="290px"

siegy22

### Example
# okra = Okra.enter
# okra.order('poulet', nan: true, pakora: false)
#
# chainable:
# Okra.enter.order('poulet').order('fish', pakora: true)
###

class Okra
  # Raj's sick today Damayanti's here for the rescue