[OffensiveBias]

how you guys connected to mysql in webshell?

cd to C:\xampp\mysql\bin

then ,
.\mysql.exe -h localhost -u MrGibbonsDB -pMisterGibbs!Parrot!?1 -e "SHOW DATABASES;"

[Phoka]

yeah buddy lol i found it too that's couse i remove the chisel part LOL

be online on discord bro

[kyakeiuwu]

yeah buddy lol i found it too that's couse i remove the chisel part LOL

wym? i didn't get that...

[kyakeiuwu]

This MF T_T

└─$ kinit f.frizzle
Password for f.frizzle@FRIZZ.HTB:
                                                                                                                                                                                                                                           
┌──(ltjax㉿kali)-[~/war]
└─$ export KRB5CCNAME=f.frizzle.ccache         
                                                                                                                                                                                                                                           
┌──(ltjax㉿kali)-[~/war]
└─$ evil-winrm -i 127.0.0.1 -r frizzdc.frizz.htb
                                       
Evil-WinRM shell v3.7
                                       
Warning: Remote path completions is disabled due to ruby limitation: quoting_detection_proc() function is unimplemented on this machine
                                       
Data: For more information, check Evil-WinRM GitHub: https://github.com/Hackplayers/evil-winr...completion
                                       
Info: Establishing connection to remote endpoint
                                       
Error: An error of type GSSAPI::GssApiError happened, message is gss_init_sec_context did not return GSS_S_COMPLETE: Unspecified GSS failure.  Minor code may provide more information
Server not found in Kerberos database                                                                                                                                                                                                     
                                                                                                                                                                                                                                           
                                       
Error: Exiting with code 1

how'd you crack the hash?

[v3701]

Anyone managed to crack the hash of f.frizzle ?

NVM i did crack it, by PC is slow as fuck

I got Exhausted from hashcat, did you use rockyou ? and module 1410 ?

[cavour13]

i think the right on eis 1710 ... ` 1710 | sha512($pass.$salt) `

[potato_moose]

Anyone managed to crack the hash of f.frizzle ?

NVM i did crack it, by PC is slow as fuck

I got Exhausted from hashcat, did you use rockyou ? and module 1410 ?

rockyou works well, mode 1420
and put it like password[:]salt in the file

[pop10189]

Anyone managed to crack the hash of f.frizzle ?

NVM i did crack it, by PC is slow as fuck

I got Exhausted from hashcat, did you use rockyou ? and module 1410 ?

rockyou works well, mode 1420
and put it like password[:]salt in the file

did you manage to auth via winrm ?

[Adith19051905]

use this
hashcat -m 1420 hash --wordlist /usr/share/wordlists/rockyou.txt

with pass:combination

[cavour13]

true did it in the same way ! fuck chatgpt!

https://hashcat.net/forum/thread-7143.htm <-- can be useful to other users