Comments and suggestions

Hi guys ,

Any hints i am stucked :D , I tried differnt paths to find .passwd file but no result

HTTP/1.0 404 Not Found
Server : BaseHTTP/0.3 Python/2.7.6
Date : Sat, 27 Oct 2018 17:21:23 GMT
Content-type : text/plain

"result" : "Authentication failed = Traceback (most recent call last) :\n File \"/challenge/app-script/ch5/ch5\", line 52, in do_AUTH\n authcombi = pickle.loads(base64.b64decode(self.headers.getheader(’Authenticate’)))\n File \"/usr/lib/python2.7/pickle.py\", line 1382, in loads\n return Unpickler(file).load()\n File \"/usr/lib/python2.7/pickle.py\", line 858, in load\n dispatch[key](self)\n File \"/usr/lib/python2.7/pickle.py\", line 1133, in load_reduce\n value = func(*args)\n File \"/usr/lib/python2.7/subprocess.py\", line 566, in check_output\n process = Popen(stdout=PIPE, *popenargs, **kwargs)\n File \"/usr/lib/python2.7/subprocess.py\", line 710, in __init__\n errread, errwrite)\n File \"/usr/lib/python2.7/subprocess.py\", line 1327, in _execute_child\n raise child_exception\nOSError : [Errno 2] No such file or directory\n"

You’ve got a wonderful stacktrace. Just read please...

Thanks a lot Th1b4ud , but what i am afraid of to search for .passwd in other directories cause the only message is meaningful for me "No such file or directory" !

You need to obtain a shell. Look at this reverse shell cheat sheet : http://pentestmonkey.net/cheat-sheet/shells/reverse-shell-cheat-sheet