City lights: Difference between revisions
From Pessin randon wiki
| Line 10: | Line 10: | ||
===Question=== | ===Question=== | ||
Find the location of the configuration file and bypass login mechanism to read it. | Find the location of the configuration file and bypass login mechanism to read it. | ||
===Still under solving=== | |||
*gobuster dir -u http://shared.target05:1234 -w /usr/share/wordlist/dirb/common.txt | |||
*gobuster dir -u http://shared.target05:1234/blueberrylogin/ -w /usr/share/wordlist/dirb/common.txt | |||
*gobuster dir -u http://shared.target05:1234/blueberrylogin/admin/ -w /usr/share/wordlist/dirb/common.txt | |||
===Solution=== | ===Solution=== | ||
===Tools=== | ===Tools=== | ||
Gobuster | |||
===Flag=== | ===Flag=== | ||
Revision as of 13:26, 5 September 2022
Description
Light in the city have been turning on and off uncontrollably.
Logs shows access to the controller from strange IP addresses.
Admin have tried to gain access but with no luck.
You as a security expert have been tasked to bypass the login mechanism to read a crucial configuration file that allows engineer to turn light into manual control.
Question
Find the location of the configuration file and bypass login mechanism to read it.
Still under solving
- gobuster dir -u http://shared.target05:1234 -w /usr/share/wordlist/dirb/common.txt
- gobuster dir -u http://shared.target05:1234/blueberrylogin/ -w /usr/share/wordlist/dirb/common.txt
- gobuster dir -u http://shared.target05:1234/blueberrylogin/admin/ -w /usr/share/wordlist/dirb/common.txt
Solution
Tools
Gobuster
