Please ask questions only in this topic.

Re: Please ask questions only in this topic.

Post by superdud on Tue Sep 29, 2015 6:07 am
([msg=89894]see Re: Please ask questions only in this topic.[/msg])

I can't seem to find the hashes, i know it's probably in s******s/p*******s/ but I just cant view it, all i get is Subdir. Any ideas?
superdud
New User
New User
 
Posts: 2
Joined: Sun Sep 20, 2015 8:44 pm
Blog: View Blog (0)


Re: Please ask questions only in this topic.

Post by conscience on Sat Aug 06, 2016 12:11 pm
([msg=92740]see Re: Please ask questions only in this topic.[/msg])

superdud wrote:I can't seem to find the hashes, i know it's probably in s******s/p*******s/ but I just cant view it, all i get is Subdir. Any ideas?


Have you checked every location and page feature you're already aware of? ;)
Let him who has understanding recount the number of the beast, for it is a human number: His number is 0x029A.
conscience
Poster
Poster
 
Posts: 280
Joined: Thu Jan 08, 2009 9:05 pm
Location: 127.0.0.1
Blog: View Blog (0)


Re: Please ask questions only in this topic.

Post by Starman11 on Tue Jul 25, 2017 3:21 pm
([msg=94008]see Re: Please ask questions only in this topic.[/msg])

i've found the login page, but im having trouble getting the user and pass. i've found another php page but it says i need to use the correct refer :( i've tried changing it but no luck. can someone help me understand what im doing wrong?
Starman11
Experienced User
Experienced User
 
Posts: 60
Joined: Wed Jul 27, 2016 9:07 am
Blog: View Blog (0)


Re: Please ask questions only in this topic.

Post by why tspace on Thu Feb 15, 2018 1:51 am
([msg=95266]see Re: Please ask questions only in this topic.[/msg])

Ok! Fun one.

I couldn't find the login page, but I really should have, because I thought I already tried visiting it!

The only hint is to break pages and note the errors. You don't have to ask Google to do a web crawl for you, everything is there in the error messages, including the hidden login page. Make sure to check subdirectories of paths you find in errors.

I used lepton's crack, "lcrack" for the hashes, if anyone's interested:

lcrack -m *** -xb+ real_13_hash.txt

where you should fill in the *** with the hashing algorithm. Make sure to have lines that look like <name>:<hash> in your input text file. In my example, I saved the lines inside "real_13_hash.txt". I had two lines, one for breaking the user and one for the pass.
why tspace
New User
New User
 
Posts: 13
Joined: Sun Feb 11, 2018 10:31 pm
Blog: View Blog (0)


Previous

Return to (Real 13) Elbonian Republican Party

Who is online

Users browsing this forum: No registered users and 0 guests