FLAG Context Fortress
by y0ukn0wm3 - October 24, 2020 at 03:32 PM
#1
Smile 
This thread is created for sharing the thoughts and tips and tricks for the fortress, please dont spam it with links to other thread or selling stuffs

First flag:
But we have SSL?:
The flag is found in one of the source pages and creds for logging into the admin can be found there
#2
Yeah, I also got this step, did you get next step?
#3
nmap shows port 3389 rdp, tried to login with the credentials on source, but failed
#4
Its a sql injection in the admin panel
#5
hints for the sql injection?? ?
#6
(October 26, 2020 at 04:28 PM)Jac0810 Wrote: hints for the sql injection?? ?


Hidden Content
You must register or login to view this content.
#7
(October 26, 2020 at 04:28 PM)Jac0810 Wrote: hints for the sql injection?? ?


When we have the credits and access https://10.13.37.12/Admin/Management we can see that we can add products, if we add quotes in certified we see that it throws us an error, which made me think that it is a syntax error, so we add 1 ") - - and it marks us that we successfully add the product, you can intercept the request with BurpSuite and use sqlmap -r request-addproduct and get sql based on time, stack queries, etc
#8
yeah got some flag on the DB but stuck after that
#9
(October 27, 2020 at 04:25 AM)drmonkey1 Wrote: yeah got some flag on the DB but stuck after that

congrats I stuck on that phase lol
#10
(October 27, 2020 at 04:25 AM)drmonkey1 Wrote: yeah got some flag on the DB but stuck after that

I'm stuck trying to inject with sqlmap, but getting nowhere until now...
How did you do the injection?
#11
(October 28, 2020 at 09:50 AM)raidmail2020 Wrote:
(October 27, 2020 at 04:25 AM)drmonkey1 Wrote: yeah got some flag on the DB but stuck after that

I'm stuck trying to inject with sqlmap, but getting nowhere until now...
How did you do the injection?

Yeah, it's a matter of resetting the Fortress after a while...
It takes ages to complete...
#12
any write up for this "box"?
greetings!

Possibly Related Threads…
Thread Author Replies Views Last Post
BUYING complete writeup for Synacktiv Fortress marchost 0 179 June 20, 2021 at 07:27 PM
Last Post: marchost
FLAG FREE Synacktiv Fortress First Flag (No writeup !!!! Only flag) chlochloe 6 2,114 June 20, 2021 at 03:22 PM
Last Post: kaer
TUTORIAL HTB Fortress Synacktiv (DISCUSSION) pheonix2021 49 14,651 June 18, 2021 at 09:53 PM
Last Post: kaer

 Users browsing this thread: 1 Guest(s)