[score en shell] challenge [help required]

[score en shell] challenge [help required] - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: [score en shell] challenge [help required] (/showthread.php?tid=5124506)

[score en shell] challenge [help required] - xermes - Jan 6, 2016

Greetings, I've ran into this challenge hackme website, however, to dont drag the thread for no reason heres some details :

scoreshell.certifiedsecure.org

If you navigate site properly you'll find robots.txt:

Code 
Disallow: /cgi-bin/

Disallow: /log/

So next logical step is to go into

Code 
/log/ (since /cgi-bin/ cant be accessed)

Anyway when you navigate to /log/ you get login form page...😯

So i tried to intercept the traffic with proxy, and I got some pretty nice info:
[Image: E5iIsbU.png]

if you examine the resposne i got, I got some information about the system, and bash logs, so I figured using shellshock might work 😵 . Gosh I was wrong, I tried every single shellshock trough user-agent/refferer/cookie, everything I could've think off.

Thank in advance,
Hack the world,
Xermes

* - Wordlist - Jan 14, 2016

what exactly are you trying to do?

hsve u tried htaccess shell ?

* - Sheeple - Jan 14, 2016

https://hackforums.net/shell.php

* - Vellichor - Jan 15, 2016

It's clear shellshock won't work, look at the last time the box has been internally updated. It's listed on the uname.

* - xermes - Jan 22, 2016

(Jan 14, 2016 04:25 PM)Wordlist Wrote: what exactly are you trying to do?

hsve u tried htaccess shell ?

go and checkout the challenge for yourself.

* - necross - May 30, 2016

have you managed to get access?

* - redlightrouter - Jan 5, 2017

Did you solve this one? Currently struggling with this one aswell.

* - jasjar101 - Feb 17, 2017

i am also stuck on this one

* - lowquality - Mar 25, 2017

(Jan 5, 2017 08:15 AM)redlightrouter Wrote: Did you solve this one? Currently struggling with this one aswell.

Did you solve it yet?
I've been trying for hours, editing headers, trying to find a shellshock vuln. It doesn't seem like it's shellshock but the challenge just screams netcat shell all-over :|

Let me know, I am anxious to solve this

* - NightWidow - Mar 27, 2017

Anybody who has more information about this challenge?

RE: [score en shell] challenge [help required] - onlyspam - May 23, 2018

Any luck on this one? After 1,5 years I still haven't solved it yet...

RE: [score en shell] challenge [help required] - Bulletcatcher007 - Apr 20, 2019

Still nothing? Im currently in the same boat and tried for hours to get something going....strange challenge :(