Benutzer-Werkzeuge

Webseiten-Werkzeuge


security:challenge:exposed_creds

Unterschiede

Hier werden die Unterschiede zwischen zwei Versionen angezeigt.

Link zu dieser Vergleichsansicht

Beide Seiten der vorigen RevisionVorhergehende Überarbeitung
security:challenge:exposed_creds [2021/06/26 13:25] wikiadmsecurity:challenge:exposed_creds [2021/07/03 15:50] (aktuell) wikiadm
Zeile 37: Zeile 37:
       #sqlite3 Login\ Data 'select username_value, password_value from logins;'       #sqlite3 Login\ Data 'select username_value, password_value from logins;'
 ./get_chrome_pass.py ./get_chrome_pass.py
-   Decrypting the string: b'v10\xa1$z\xb0\x18\xee+\xbbMG\xe0\x0bM\x13\x7fA                              +   Decrypting the string: b'v...                              
-   blokeontherange+   b...e
 </code> </code>
  
Zeile 54: Zeile 54:
  
 cat /var/www/app/.env cat /var/www/app/.env
-MYSQL_ROOT_PASSWORD=tiger +MYSQL_ROOT_PASSWORD=t..r 
-MYSQL_USER=docker +MYSQL_USER=d..r 
-MYSQL_PASSWORD=docker +MYSQL_PASSWORD=xxx 
-MYSQL_DATABASE=docker+MYSQL_DATABASE=xxx
  
 cat /var/www/app/www/conf.php  cat /var/www/app/www/conf.php 
Zeile 78: Zeile 78:
                  
 mysql -h 192.168.6.105 -u root -p intern mysql -h 192.168.6.105 -u root -p intern
--> tiger+-> t..r
  
 mysql> select * from users; mysql> select * from users;
Zeile 84: Zeile 84:
 | id | username | password                         | created_at          | | id | username | password                         | created_at          |
 +----+----------+----------------------------------+---------------------+ +----+----------+----------------------------------+---------------------+
-|  1 | bob      | cc185f2d749c0beca19e9bcaadedfbb0 | 2021-06-26 10:35:43 | +|  1 | bob      | xxx | 2021-06-26 10:35:43 | 
-|  2 | garry    | 8a6ed31d1f6370478b943133efeac70a | 2021-06-26 10:35:43 |+|  2 | garry    | xxx | 2021-06-26 10:35:43 |
 +----+----------+----------------------------------+---------------------+ +----+----------+----------------------------------+---------------------+
  
 google for hash google for hash
---> bob7+--> b..7
 </code> </code>
  
Zeile 100: Zeile 100:
 cat /home/bob/.aws/credentials cat /home/bob/.aws/credentials
 [default] [default]
-aws_access_key_id = AJOWNVKJSFHOQSDK2JD9T +aws_access_key_id = xxx 
-aws_secret_access_key = IT7mJcNJIZSb60p/J12aJOC4DVUUrH5f+aws_secret_access_key = xxx
 </code> </code>
security/challenge/exposed_creds.txt · Zuletzt geändert: von wikiadm

Donate Powered by PHP Valid HTML5 Valid CSS Driven by DokuWiki