http://blog.nowherejezfoltodf4jiyl6r56jnzintap5vyjlia7fkirfsnfizflqd.onion/HTB/Medium/28.html
Nmap done: 1 IP address (1 host up) scanned in 11.01 seconds Part 2 : Getting User Access Our nmap scan picked up port 5000 running http Gunicorn 19 so let's investigate it with dirsearch: λ nihilist [ 10.10.14.11/23 ] [~]
→ dirsearch -u http://10.10.10.91:5000/ -e txt,php,html,xml -x 403 -t 100 Looks like we have a website in construction so let's check out /upload which is a webpage onto which we can upload xml files
So just like for Aragorg , we...