Posts
17
Threads
4
Joined
May 2020
November 16, 2020 at 03:31 PM
1.look at source code in the staff page
2.sqli after login in "&certified=1" parameter db=mssql type=blind time based
3.login to emails with use password from 1st step switch between email from staff page to find the flag and info to go further
Posts
34
Threads
8
Joined
Apr 2020
1 Year of service
December 01, 2020 at 04:22 AM
Any updates on 4th,5,6,7 flags
Posts
17
Threads
4
Joined
May 2020
December 03, 2020 at 10:33 AM
This post was last modified: December 03, 2020 at 10:35 AM by sh00t.
(December 01, 2020 at 04:22 AM)esh_din1 Wrote: Any updates on 4th,5,6,7 flags
4- add 'Profile=serialized' to the cookie and get shell C:\Users\Public\flag.txt
5-after shell look up for creds in log and use em to login to db then extract flag from linked server there
if u found about 6 7 dont forget me mate
Posts
18
Threads
1
Joined
Mar 2020
1 Year of service
December 04, 2020 at 11:55 PM
This post was last modified: December 04, 2020 at 11:55 PM by Doop3r.
(December 03, 2020 at 10:33 AM)sh00t Wrote: (December 01, 2020 at 04:22 AM)esh_din1 Wrote: Any updates on 4th,5,6,7 flags
4- add 'Profile=serialized' to the cookie and get shell C:\Users\Public\flag.txt
5-after shell look up for creds in log and use em to login to db then extract flag from linked server there
if u found about 6 7 dont forget me mate
Pm me
Posts
23
Threads
9
Joined
Dec 2019
1 Year of service
December 05, 2020 at 08:40 AM
CONTEXT{d0_it_st0p_it_br30 real flag?
Posts
17
Threads
4
Joined
May 2020
December 05, 2020 at 02:09 PM
(December 05, 2020 at 08:40 AM)0x2019 Wrote: CONTEXT{d0_it_st0p_it_br30 real flag?
6,7 idk but 1,2,3,4,5 noooo
Posts
34
Threads
8
Joined
Apr 2020
1 Year of service
December 07, 2020 at 05:40 AM
(December 05, 2020 at 08:40 AM)0x2019 Wrote: CONTEXT{d0_it_st0p_it_br30 real flag? Correct but you need some more time to retrive complete flag
Posts
15
Threads
2
Joined
Aug 2017
3 Years of service
December 07, 2020 at 02:30 PM
can someone tell me how to get the 5th flag ?
im having trouble
Posts
23
Threads
9
Joined
Dec 2019
1 Year of service
December 08, 2020 at 06:00 AM
(December 07, 2020 at 05:40 AM)esh_din1 Wrote: (December 05, 2020 at 08:40 AM)0x2019 Wrote: CONTEXT{d0_it_st0p_it_br30 real flag? Correct but you need some more time to retrive complete flag thanks got it after session clear
Posts
5
Threads
3
Joined
Dec 2020
December 14, 2020 at 03:33 PM
(December 03, 2020 at 10:33 AM)sh00t Wrote: (December 01, 2020 at 04:22 AM)esh_din1 Wrote: Any updates on 4th,5,6,7 flags
4- add 'Profile=serialized' to the cookie and get shell C:\Users\Public\flag.txt
5-after shell look up for creds in log and use em to login to db then extract flag from linked server there
if u found about 6 7 dont forget me mate
Any updates on flag 6 ,7 . Stuck in mssql.
Posts
3
Threads
0
Joined
Nov 2020
December 15, 2020 at 03:30 AM
Trading all Flags for ImageTok / nginxatsu
Posts
15
Threads
0
Joined
Dec 2020
December 15, 2020 at 05:33 PM
How to connect to context fortress firstly i connectd my fortress vpn then what is the command to connect to context fortress
Please help
|