Credentials — TartarSauce¶
| User | Password/Hash | Type | Source | Access Granted | Tested |
|---|---|---|---|---|---|
| admin | 5d1e3697d706b0e24e574b56e79affda |
MD5 hash | /webservices/monstra-3.0.4/storage/database/users.table.xml |
Monstra admin (decoy) | Yes — admin:admin (default) |
| www-data | n/a | Reverse shell | gwolle-gb RFI (CVE-2015-8351) | Web user shell | Yes — works |
| onuma | n/a | sudo lateral | sudo -u onuma /bin/tar ... (GTFOBins) |
User shell | Yes — works |
| root | n/a | File leak | backuperer race + symlink + diff -r |
Read /root/root.txt only (no shell) | Yes — flag captured |
Notes¶
- Monstra CMS stores DB as flat XML files in
storage/database/— publicly accessible - Hash salt/token:
jB64OpMOWGxq - Email:
[email protected] - About: "I like falafel with tartar sauce."
- Role: admin