+- Sinisterly (https://sinister.ly)
+-- Forum: Hacking (https://sinister.ly/Forum-Hacking)
+--- Forum: Website & Server Hacking (https://sinister.ly/Forum-Website-Server-Hacking)
+--- Thread: [Challenge] Gain shell on server [/Challenge] (/Thread-Challenge-Gain-shell-on-server-Challenge)
[Challenge] Gain shell on server [/Challenge] - Crypt - 07-13-2014
Website: http://www.scorpion.ne.jp
Objective: Gain a fully interactive command line based shell on the server
Method: RCE
Difficulty: Medium-hardish
Proof -
![[Image: xTI3zx0.png]](http://i.imgur.com/xTI3zx0.png)
Post a screenshot in the same way I did for proof
Good luck
This was done using a public vulnerability just so everyone knows. I just thought it'd be a good challenge.
Solvers -
Dyme
Arthur Curry
Oni
RE: [Challenge] Gain shell on server [/Challenge] - Adorapuff - 07-13-2014
There's supposed to be a 404 right?
RE: [Challenge] Gain shell on server [/Challenge] - Crypt - 07-13-2014
(07-13-2014, 08:10 AM)Adorapuff Wrote: There's supposed to be a 404 right?
Not sure what you mean but the way I did it, I didn't encounter any 404s.
RE: [Challenge] Gain shell on server [/Challenge] - Eclipse - 07-13-2014
(07-13-2014, 08:23 AM)Crypt Wrote: Not sure what you mean but the way I did it, I didn't encounter any 404s.
The index page has a 404.
Code:
Not Found
The requested URL / was not found on this server.RE: [Challenge] Gain shell on server [/Challenge] - Dyme - 07-13-2014
I applaud you for posting something that actually retains my interest.
![[Image: OZIL3hP.png]](http://i.imgur.com/OZIL3hP.png)
I see that your id differs from mine... perhaps we utilized a different vulnerability on the server? Mine was command injection as well.
(07-13-2014, 08:10 AM)Adorapuff Wrote: There's supposed to be a 404 right?
(07-13-2014, 08:49 AM)Aurora Wrote: The index page has a 404.
I don't know if it's 'supposed to', but the vulnerable software is completely independent of the index page.
RE: [Challenge] Gain shell on server [/Challenge] - Crypt - 07-13-2014
(07-13-2014, 02:41 PM)Dyme Wrote: I applaud you for posting something that actually retains my interest.
I see that your id differs from mine... perhaps we utilized a different vulnerability on the server? Mine was command injection as well.
I don't know if it's 'supposed to', but the vulnerable software is completely independent of the index page.
Nice, added you to the solvers list. I'll try to create more challenges like these.
RE: [Challenge] Gain shell on server [/Challenge] - Adorapuff - 07-13-2014
(07-13-2014, 02:41 PM)Dyme Wrote: I applaud you for posting something that actually retains my interest.Thanks. I'll try the challenge when I get back home on the 17th
I see that your id differs from mine... perhaps we utilized a different vulnerability on the server? Mine was command injection as well.
I don't know if it's 'supposed to', but the vulnerable software is completely independent of the index page.
RE: [Challenge] Gain shell on server [/Challenge] - Eclipse - 07-13-2014
(07-13-2014, 02:41 PM)Dyme Wrote: I don't know if it's 'supposed to', but the vulnerable software is completely independent of the index page.
I see.
(07-13-2014, 04:37 PM)Adorapuff Wrote: Thanks. I'll try the challenge when I get back home on the 17th
As will I. Hopefully my laptop'll turn on. :/
RE: [Challenge] Gain shell on server [/Challenge] - Eclipse - 07-14-2014
May I ask how old this vulnerability is? I'm using a fairly old verstion of the msf.
RE: [Challenge] Gain shell on server [/Challenge] - Dyme - 07-14-2014
(07-14-2014, 05:08 PM)Aurora Wrote: May I ask how old this vulnerability is? I'm using a fairly old verstion of the msf.
Exploiting the vulnerability has nothing to do with msf... If you're referring to my post - all I did was execute a meterpreter shell to meet the op's requirements (an interactive shell of some kind). I did not use a metasploit module to exploit the bug itself.
On a completely off topic note: I would recommend re installing metasploit using git.