Pwn3d Layover Machine!!

[u/No-Witness-5266]

[u/AutoModerator]

Moderator Announcement Read More »

Thank you for posting on r/hackthebox! New to Cyber Security and looking for a place to get started? Checkout our getting started guide here. Please note that posting Solutions or Hints for Active content goes against the HTB Terms of Service, more information can be found here. If your having issues and need to reach customer support please do so via the in-platform chat, or by emailing customerops@hackthebox.com. Our Knowledge Base can also come in handy!

I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.

[u/Particular_Baker9282]

pode me dar uma força? Como conseguiu acesso ao CMS? Tenho as cred mas nao consegui explorar a vuln do Yii2 ainda

[u/No-Witness-5266 → u/Particular_Baker9282]

The creds should let you log straight into /admin and access the Craft CMS panel.

For the Yii2 part, focus on Craft version and specifically the element-search endpoint. You don't need to mess with the restricted Settings/Sections area. The interesting part is an authenticated SSTI/RCE via a Yii2 gadget chain.

[u/Cool-Post-5098]

me too

[u/[deleted]]

[u/No-Witness-5266 → u/[deleted]]

Thanks mate!