Knowledge Hub

Oopsie

Hack The Box13 answered prompts

Oopsie Hack The Box walkthrough with 13 answered prompts and lab methodology notes.

Prompts and answers

  • more reports
    ** reports: directory **
  • There is an academy module for this. Also Burp can be considered such a tool.
    proxy
  • What is the path to the directory on the webserver that returns a login page?
    /cdn-cgi/login
  • What can be modified in Firefox to get access to the upload page?
    cookie
  • Try to decrease the values of the existing id parameter in order to access other users information.
    34322
  • On uploading a file, what directory does that file appear in on the server?
    /uploads
  • What is the file that contains the password that is shared with the robert user?
    db.php
  • This UNIX command line utilities is for walking a file hierarchy.
    find
  • Regardless of which user starts running the bugtracker executable, what's user privileges will use to run?
    root
  • What SUID stands for?
    Set owner User ID
  • What is the name of the executable being called in an insecure manner?
    cat
  • Submit user flag
    f2c74ee8db7983851ab2a96a44eb7981
  • Submit root flag
    af13b0bee69f8a877c3faf667f7beacf