Return to forum
Extension - HTB [Discussion]
by - Thursday, January 1, 1970 at 12:00 AM
BreachForums User
VIP
Posts: 213
Threads: 0
Joined: N/A
Reputation: 56

#1
July 16, 2022 at 6:44 PM
New machine from 2022-07-16.

PORT   STATE SERVICE
22/tcp open  ssh
80/tcp open  http
Reply
Advanced User
Advanced
Posts: 57
Threads: 0
Joined: N/A
Reputation: 32

#2
July 16, 2022 at 7:04 PM
Register needs a special domain it seems

Nvm, snippet.htb works but register is not allowed
Reply
BreachForums User
VIP
Posts: 213
Threads: 0
Joined: N/A
Reputation: 56

#3
July 16, 2022 at 7:22 PM
I found http://mail.snippet.htb and http://dev.snippet.htb/
Reply
Elite User
Elite
Posts: 166
Threads: 0
Joined: N/A
Reputation: 5

#4
July 16, 2022 at 7:26 PM
ffuf -w /usr/share/seclists/Discovery/DNS/subdomains-top1million-110000.txt:FUZZ -u http://snippet.htb -H 'Host: FUZZ.snippet.htb' -fl 30 if someone wanna know
Reply
BreachForums User
Member
Posts: 0
Threads: 0
Joined: N/A
Reputation: 0

#5
July 16, 2022 at 7:30 PM
(July 16, 2022, 07:22 PM)Exa Wrote: I found http://mail.snippet.htb and http://dev.snippet.htb/

dev.snippet is a good way to exploit!
Reply
BreachForums User
VIP
Posts: 213
Threads: 0
Joined: N/A
Reputation: 56

#6
July 16, 2022 at 7:37 PM
(July 16, 2022, 07:30 PM)nhocit Wrote:
(July 16, 2022, 07:22 PM)Exa Wrote: I found http://mail.snippet.htb and http://dev.snippet.htb/

dev.snippet is a good way to exploit!


How so?
Reply
BreachForums User
Member
Posts: 0
Threads: 0
Joined: N/A
Reputation: 0

#7
July 16, 2022 at 7:39 PM
(July 16, 2022, 07:37 PM)Exa Wrote:
(July 16, 2022, 07:30 PM)nhocit Wrote:
(July 16, 2022, 07:22 PM)Exa Wrote: I found http://mail.snippet.htb and http://dev.snippet.htb/

dev.snippet is a good way to exploit!


How so?

I am playing around with this:
http://dev.snippet.htb/api/swagger#/admin
Also there is a video here:
https://www.youtube.com/watch?v=8gf5YvvY1yc&t=2415s
Reply
Advanced User
Advanced
Posts: 57
Threads: 0
Joined: N/A
Reputation: 32

#8
July 16, 2022 at 8:25 PM
Been trying to perform password poisoning through forgot-password without success
Anyone's having better luck ?
Reply
Elite User
Elite
Posts: 166
Threads: 0
Joined: N/A
Reputation: 5

#9
July 17, 2022 at 12:12 AM
[INFO] (custom) POST parameter 'JSON email' appears to be 'MySQL > 5.0.12 time-based blind - Parameter

waiting here
Reply
Elite User
Elite
Posts: 166
Threads: 0
Joined: N/A
Reputation: 5

#10
July 17, 2022 at 12:45 AM
nothing yet:

http://mail.snippet.htb/ (7.4.27 under X-Powered-By: PHP/7.4.27)

idk its some exploit with php ? searching in google here

found K19150034: PHP vulnerabilities CVE-2022-31625, CVE-2022-31626
Reply


 Users viewing this thread: Extension - HTB [Discussion]: No users currently viewing.