Hacker News Reader

Comment by stdcall83 | Hacker News Reader

Exactly what I did. But in Python. Now I'm stuck on challenge 2

Yes, I'm stuck on second as well.

But I got some progress: 1. Image leads to subdomain: http://dev.missilesys.com/ 2. It generates p12 certificate for login to admin-panel. You should enter username/password, submit the form and click download. (It there is no download button just try something like this: refresh the page, change method from POST to GET, enter credentials and press Submit, after that press submit again it'll appear) 3. Add certificate to KeyChain (on macOS) and go to missilesys.com. 4. You're got into admin-panel, but you have no permissions to shutdown it. You need to be an administrator. 5. You should get .p12 certificate for administrator, but you can't because "User alreay exists!". This's place where I'm stuck.

It would be great if you have an idea how to handle with it :)

Now the problem is to get the administrator certificate

As I check:You need to input administrator inside login without pass in browser Preserve log mode and jAvAsCrIpT generate it by login name check Headers Form Data private key .I think I am on the way but now I need password from cert of Admin now:))

Did you get any solution from there? To me it seems that these are just randomly generated certs with a CN

No not work . But Good idea you give cert is now wildcard *. CN Common Name . Thank U. I check.

Any luck?

NO, It's harible..

I have an idea, but don't have the time to check :-/ Using online CSR generator I succeeded to sign a CA certificate.. So maybe we can use the signed certificate to sign another certificate for admin user on behalf of the root certificate?

update: it worked :-)

But how did u send csr as CA? I guess they must provide you certificate that includes CA=True ? (in order to continue the chain)

The csr is created in the client and sent to server to be signed... you can replace it

tnx. worked! now did u pass the telnet ?

Can you post how you did it?

I have the csr and the private key of the administrator but I don't know how to sign it on behalf of the root certificate, any idea?

send them csr that it's CA=TRUE. then you recieve a cert you can sign others.. so sign adminstrator cert by yourself

But when I signed the csr with a valid crt from a downloaded p12 I got ssl error on the website

And I don’t have the CA praivet key

not yet... didn't have the time :-/ but it seems much easier than the previous one...

As I understood grab with Openssl cert root https://missilesys.com/ and BURP with new account http://dev.missilesys.com/ I try soon thk U

Try sending a GET request to "/" :P

"GET / HTTP/1.1" 444 0 "B)","_"

I'm getting 500 INTERNAL SERVER ERROR

i'm still getting User Exists though...

Can you explain step by step how you have done it? :) If you change to CSR and key in the request to self-generated, it still says username already exists.

on the other side, if I create my own certificate using custom CSR and key, I still cannot sign it with website CA (taken from original p12 file) since I do not have the private key.

Hi,

Can anyone help me with this?

I know that if you go to dev.missilesys.com, and download the cert you see that it is signed by International Weapons Export Inc.

so i created a root ca with the same name

than i created a csr with common name administrator

than i created a cert, i used the csr and the root ca i generated

after that i created a pfx, it's the same as p12 afaik, and tried to login i'm getting error 400

i wanted to use the original ca from the web site, i decoded the file p12, but i don't have the private key

anyone can help me? thanks

how could u do it? from my understanding of pcsk12 its a bundle of multiple certificates.

Theres a chain of trust and if you have a signed CA certificate from a root you can sign on behalf of the root

Tell me where I get wrong.

1. I created CSR with CA:TRUE and send it to the server. 2. The server signed it and returned me a certificate. 3. I use the given certificated with CA:TRUE from the server and sign a new certificate with the username administrator. 4. I install the certificate on my browser and should get in.

All of the above sounds great. however, it is still(!!!) not working for me. Where am I going wrong

Make sure you install the administrator certificate with its private key... Bundle the private key with the cert.

How do you even get the CA private key

Reply on news.ycombinator.com