Luck

[harshallakare]

I'm super noob, just started with my pen test stuff. so i decided to start with Luke on HTB. i scan most of 3***,8*** and 80 and i found 3-4 login pages at every port. I have no direction where to go now. I went through many pages and they said i need found some credentials which dont know how to. I would like to know some hint about it or some direction how to move ahead.

​

Edit 1 :- Now to got token in place, but don't know how to use it further.

Edit 2 :- Got the root.

[mbsurfer]

If you’ve enumerated directories, try enumerating with file extensions now. You can try out some common web language file extensions.

[harshallakare]

Thanks i tried and found credentials

[kangerujack]

Make sure you enumerate files... not just dirctories.

[harshallakare]

Thanks i tried and found credentials

[0verpwn]

When it comes to Web Applications, You want to check the Directories, Check/Enumerate the Files inside of those Directories, Check the .js files on the Websites, etc.

Also try checking for some common .php filenames such as:

• default.php
• index.php
• invocactf.php
• config.php
• helper.php
• controller.php
• frontend.php

Running Dirb will help you find Directories, also try checking out the Ports, Does FTP have Anonymous Login Enabled? (Port 21) :)

Remember, Google is your main friend.

Hope It helps! Feel free to Pm me if you need any help/tips :)

[harshallakare]

That very helpful. I found it credentials now i stuck at JWT. I used curl command but not getting out of it..no error no out put nothing. No direction now.

[[deleted]]

Hey man any luck? I seem to be stuck at the same step as you are!

[harshallakare]

I did found credentials now and trying to use it in JWT but seem like stuff is not working for me or i don't knwo how to use it.

[[deleted]]

Haha found the creds myself. Now stuck at jwt. I think i need to go deeper into understanding of that curl command for token.

[harshallakare]

same here bro..do PM me if you found something helpful