Derailed - HTB [Discussion]
by - Thursday, January 1, 1970 at 12:00 AM
PORT     STATE SERVICE
22/tcp  open  ssh
3000/tcp open  ppp
Reply
[php]# /rails/info/properties

Rails version 6.1.6
Ruby version ruby 2.7.2p137 (2020-10-01 revision 5445e04352) [x86_64-linux]
RubyGems version 3.1.4
Rack version 2.2.3
Middleware
Webpacker::DevServerProxy
ActionDispatch::HostAuthorization
Rack::Sendfile
ActionDispatch::Static
ActionDispatch::Executor
ActiveSupport::Cache::Strategy::LocalCache::Middleware
Rack::Runtime
Rack::MethodOverride
ActionDispatch::RequestId
ActionDispatch::RemoteIp
Sprockets::Rails::QuietAssets
Rails::Rack::Logger
ActionDispatch::ShowExceptions
ActionDispatch::ActionableExceptions
ActionDispatch::Reloader
ActionDispatch::Callbacks
ActiveRecord::Migration::CheckPending
ActionDispatch::Cookies
ActionDispatch::Session::CookieStore
ActionDispatch::Flash
ActionDispatch::ContentSecurityPolicy::Middleware
ActionDispatch::PermissionsPolicy::Middleware
Rack::Head
Rack::ConditionalGet
Rack::ETag
Rack::TempfileReaper
Application root /var/www/rails-app
Environment development
Database adapter sqlite3
Database schema version 20220529182601[/php]
Reply
All the routes are in http://derailed.htb:3000/rails/info/routes

No need to fuzz this one.
Reply
anyone found a way to log in?
Reply
(November 19, 2022, 09:19 PM)Hacker2222 Wrote:
(November 19, 2022, 09:18 PM)bruhmoment236 Wrote: anyone found a way to log in?


register a user JAJAJA we just need to become admin prob with xss in report


stealling cookie?
Reply
No stealing cookies rubik lol
I have quit due to abuse from mods. I will be back some day
Reply
Any hints ?
Reply
I am lost, any help? I am trying ruby deserialization , but nothing yet!
Reply
(November 19, 2022, 11:39 PM)josh007 Wrote: I am lost, any help? I am trying ruby deserialization , but nothing yet!


not sure but prob xss with the report . cant get the payload to call back tho
Reply
(November 20, 2022, 12:33 AM)Hacker2222 Wrote:
(November 19, 2022, 11:39 PM)josh007 Wrote: I am lost, any help? I am trying ruby deserialization , but nothing yet!


not sure but prob xss with the report . cant get the payload to call back tho


I've tried to steel admin cookies but, but never receive them. now I am testing deserialization on page /report but the application crashed.
Reply


 Users viewing this thread: Derailed - HTB [Discussion]: No users currently viewing.