But I got some progress:
1. Image leads to subdomain: http://dev.missilesys.com/
2. It generates p12 certificate for login to admin-panel. You should enter username/password, submit the form and click download. (It there is no download button just try something like this: refresh the page, change method from POST to GET, enter credentials and press Submit, after that press submit again it'll appear)
3. Add certificate to KeyChain (on macOS) and go to missilesys.com.
4. You're got into admin-panel, but you have no permissions to shutdown it. You need to be an administrator.
5. You should get .p12 certificate for administrator, but you can't because "User alreay exists!". This's place where I'm stuck.
It would be great if you have an idea how to handle with it :)
As I check:You need to input administrator inside login without pass in browser Preserve log mode and jAvAsCrIpT generate it by login name check Headers Form Data private key .I think I am on the way but now I need password from cert of Admin now:))
I have an idea, but don't have the time to check :-/
Using online CSR generator I succeeded to sign a CA certificate.. So maybe we can use the signed certificate to sign another certificate for admin user on behalf of the root certificate?
1. I created CSR with CA:TRUE and send it to the server.
2. The server signed it and returned me a certificate.
3. I use the given certificated with CA:TRUE from the server and sign a new certificate with the username administrator.
4. I install the certificate on my browser and should get in.
All of the above sounds great. however, it is still(!!!) not working for me.
Where am I going wrong
Can you explain step by step how you have done it? :)
If you change to CSR and key in the request to self-generated, it still says username already exists.
on the other side, if I create my own certificate using custom CSR and key, I still cannot sign it with website CA (taken from original p12 file) since I do not have the private key.
Comments
Yes, I'm stuck on second as well.
But I got some progress: 1. Image leads to subdomain: http://dev.missilesys.com/ 2. It generates p12 certificate for login to admin-panel. You should enter username/password, submit the form and click download. (It there is no download button just try something like this: refresh the page, change method from POST to GET, enter credentials and press Submit, after that press submit again it'll appear) 3. Add certificate to KeyChain (on macOS) and go to missilesys.com. 4. You're got into admin-panel, but you have no permissions to shutdown it. You need to be an administrator. 5. You should get .p12 certificate for administrator, but you can't because "User alreay exists!". This's place where I'm stuck.
It would be great if you have an idea how to handle with it :)
Now the problem is to get the administrator certificate
As I check:You need to input administrator inside login without pass in browser Preserve log mode and jAvAsCrIpT generate it by login name check Headers Form Data private key .I think I am on the way but now I need password from cert of Admin now:))
Did you get any solution from there? To me it seems that these are just randomly generated certs with a CN
No not work . But Good idea you give cert is now wildcard *. CN Common Name . Thank U. I check.
Any luck?
NO, It's harible..
I have an idea, but don't have the time to check :-/ Using online CSR generator I succeeded to sign a CA certificate.. So maybe we can use the signed certificate to sign another certificate for admin user on behalf of the root certificate?
how could u do it? from my understanding of pcsk12 its a bundle of multiple certificates.
Theres a chain of trust and if you have a signed CA certificate from a root you can sign on behalf of the root
Tell me where I get wrong.
1. I created CSR with CA:TRUE and send it to the server. 2. The server signed it and returned me a certificate. 3. I use the given certificated with CA:TRUE from the server and sign a new certificate with the username administrator. 4. I install the certificate on my browser and should get in.
All of the above sounds great. however, it is still(!!!) not working for me. Where am I going wrong
Make sure you install the administrator certificate with its private key... Bundle the private key with the cert.
How do you even get the CA private key
update: it worked :-)
Hi,
Can anyone help me with this?
I know that if you go to dev.missilesys.com, and download the cert you see that it is signed by International Weapons Export Inc.
so i created a root ca with the same name
than i created a csr with common name administrator
than i created a cert, i used the csr and the root ca i generated
after that i created a pfx, it's the same as p12 afaik, and tried to login i'm getting error 400
i wanted to use the original ca from the web site, i decoded the file p12, but i don't have the private key
anyone can help me? thanks
Can you explain step by step how you have done it? :) If you change to CSR and key in the request to self-generated, it still says username already exists.
on the other side, if I create my own certificate using custom CSR and key, I still cannot sign it with website CA (taken from original p12 file) since I do not have the private key.
But how did u send csr as CA? I guess they must provide you certificate that includes CA=True ? (in order to continue the chain)
The csr is created in the client and sent to server to be signed... you can replace it
i'm still getting User Exists though...
tnx. worked! now did u pass the telnet ?
As I understood grab with Openssl cert root https://missilesys.com/ and BURP with new account http://dev.missilesys.com/ I try soon thk U
Try sending a GET request to "/" :P
"GET / HTTP/1.1" 444 0 "B)","_"
I'm getting 500 INTERNAL SERVER ERROR
not yet... didn't have the time :-/ but it seems much easier than the previous one...
Can you post how you did it?
I have the csr and the private key of the administrator but I don't know how to sign it on behalf of the root certificate, any idea?
send them csr that it's CA=TRUE. then you recieve a cert you can sign others.. so sign adminstrator cert by yourself
But when I signed the csr with a valid crt from a downloaded p12 I got ssl error on the website
And I don’t have the CA praivet key