[GWTW]

Hello folks,

I would like too share the write up for the HTB - Jab. Kindly check.
For the outline:
1) Get userlist from pidgin new account
2) Crack jmontgomery' hash from the above userlist with GetNPUsers.
3) Get svc_openfire password from jmontgomery' pentest2023 room. and the user flag.
4) Get root flag from openfire admin console with malicious plugin.

Hidden Content

You must register or login to view this content.

Bests,
GWTW

[DeepDrop]

thank you. This is good stuff. Only change i would make is on the jar part:

...... > shell Plugin > Login using password "123" > Choose the third .........

[v33]

nice work.. I was really stuck

[susadmin]

you're a legend thank you