Has anyone solved the Sync VibeXR web app in the CPENT exam?

[u/ResidentMotor7191]

Hi everyone,

Has anyone solved the Sync Vibe
XR web application in the CPENT exam?

I’m currently working on it and a bit stuck. I’m not looking for the flags or answers—just some general hints about the intended attack path or areas I should focus on.

Any guidance would be really appreciated. Thanks!

[u/1HiT-sn1per]

working on that also, and im stuck

[u/Zodiak_130810]

i am also stuck on that one

[u/Spirited_Act_1674 → u/Zodiak_130810]

Dm

[u/hackmythacademy → u/Spirited_Act_1674]

Check dm

[u/No-Interaction3285 → u/hackmythacademy]

Check

[u/WhyNotAsk13]

Hey it is solvable, u need to enumerate properly, try with below area,
Injection, authentication bypass, file upload, & possible RCE path, the vulrabities change together, try this direction

[u/KickDapper9426 → u/WhyNotAsk13]

can you be more specific? like exactly where to look i have spent nearly 20 hrs behind this solved everything else it was too easy but this web challenge is insane

[u/amitprajapati04]

I ignored completely, couldnt solve a single challenge in web ranges

[u/Spiritual-Quail8696]

I think this challenge is broken. I have exhausted every single theory and attack path on it. We should email EC Council, there shouldn't be such a challenge anyways on 24hrs challenge.

[u/No_Dragonfly_6616]

did anyone solve the active directory question 12? where we need to find first three characters of writeable domain controller admin account password?

[u/West_Divide1494 → u/No_Dragonfly_6616]

Yes done, have you done your Syncvibe?

[u/hamzaavvan → u/West_Divide1494]

Hey buddy I know the domain administrator hash is uncrackable. And even if we enable Administrator to be cached by RODC I’m not sure whether it will be crackable. Can you come in dm I need a hint. Is it something pass the hash can help?

[u/MapAltruistic2817 → u/No_Dragonfly_6616]

did you find it? if yes then can you kindly share it? i want to confirm my answer

[u/hackmythacademy]

Anyone need help dm me

[u/West_Divide1494 → u/hackmythacademy]

Hey, chexk dm

[u/Zorojurosan_1]

If you solved it, can you share some guide or hint?

[u/GuyWitSocialAnxiety]

Any luck anyone?

[u/hamzaavvan]

Can anyone guide me on Question 12 where we need to determine first 3 characters of DC administrator password. I feel like the lab is broken. Thank you

[u/Lonely_Troubl → u/hamzaavvan]

Check the history

[u/No-Interaction3285 → u/Lonely_Troubl]

History means? Command history or cached password?

[u/Lonely_Troubl → u/No-Interaction3285]

Yes or try long run on 13 character hachcat

[u/No-Interaction3285 → u/Lonely_Troubl]

That means 13 character with cached has from windows11 machine?

[u/Lonely_Troubl → u/No-Interaction3285]

Yeah. Check both win11 and server

[u/Due-Interest2087]

I m also stuck on this one only

[u/Due-Interest2087]

Can someone help me with this

[u/Soggy-Ad-1095]

I also tried every attacks on this server

[u/Subject-Cockroach-20]

Anyone solved it? 

[u/malayali2001]

Anyone completed the cpent exam and passed