Cockpit_Web_80_Admin

Admin Page

---

Validating the exfiltrated web credential for the login page

Or authentication bypass

Successfully authenticated and redirected to the dashboard at /password-dashboard.php 2 user credentials are revealed;

• james:Y2FudHRvdWNoaGh0aGlzc0A0NTUxNTI=
• cameron:dGhpc3NjYW50dGJldG91Y2hlZGRANDU1MTUy

Password appears to be base64-encoded

┌──(kali㉿kali)-[~/PEN-200/PG_PRACTICE/cockpit]
└─$ echo -n 'Y2FudHRvdWNoaGh0aGlzc0A0NTUxNTI=' | base64 -d
canttouchhhthiss@455152                                                                                                                                        
┌──(kali㉿kali)-[~/PEN-200/PG_PRACTICE/cockpit]
└─$ echo -n 'dGhpc3NjYW50dGJldG91Y2hlZGRANDU1MTUy' | base64 -d
thisscanttbetouchedd@455152                                                                                                                                        

Decoded;

• james:canttouchhhthiss@455152
• cameron:thisscanttbetouchedd@455152

There is password reuse for the james user