[celsius]

Let the Hunger Games begins !

[byteninja9]

Let's go, guys!

[UnkownWombat]

/admin is an endpoint, also /admin/navbar.php midly interesting. admin is also a username confirmable by password reset option

[olkn00b]

found subdomain http://cacti.monitorsthree.htb/cacti/

[UnkownWombat]

most rce's look like they need creds

[jsvensson]

This is 1.2.26 version so CVE-2024-25641 - authenticated rce

[hackemall]

(_||| _) (/_(_|| (_| )

Extensions: php, aspx, jsp, html, js | HTTP method: GET | Threads: 25
Wordlist size: 11460

Output File: /home/kali/reports/http_cacti.monitorsthree.htb/_24-08-24_19-26-09.txt

Target: http://cacti.monitorsthree.htb/

[19:26:09] Starting:
[19:26:22] 301 - 178B - /app -> http://cacti.monitorsthree.htb/app/
[19:26:22] 200 - 13KB - /app/
[19:26:24] 301 - 178B - /cacti -> http://cacti.monitorsthree.htb/cacti/
[19:26:24] 200 - 14KB - /cacti/

[AdenBilal]

anybody got any working cve? most of these are for post login

[celsius]

someone found how to sqli the field ???

[teky]

ok what are the creds for cacti