Bastion

Starting the conversation..

20 point box... thank god :D

"ClickmedotEXE"
CISSP | OSCP
arodtube

Tagged:
«13456723

Comments

  • Guys I found the RCE!

  • edited April 27

    Type your comment> @B3LL4T0R said:

    Guys I found the RCE!

    that's a rabbit hole :(

    haditux

  • edited April 27

    Type your comment> @H4d3s said:

    Type your comment> @B3LL4T0R said:

    Guys I found the RCE!

    that's a rabbit hole :(

    :( darn maybe i should enumerate ******* more?

  • Isnt the box not open yet???

  • Type your comment> @FlompyDoo said:

    Isnt the box not open yet???

    for real c00l hackers the opening of box is not necessary

    tabacci

  • For those who don't know...you can hack time.
    Tutorial:

    cyberus17l

  • edited May 2

    got root. Thanks @L4mpje for this realistic box <3

  • And the race is over. Kudos @st3r30byt3 & @snowscan

    "Respect to whom respect is due."
    Twitter: https://twitter.com/0x4242 | Web: http://0x4242.net
  • is someone willing to discuss the solution and provide some help ?

  • hey is the .vhd a rabbit hole i keep getting booted trying to grab it any suggestions?

  • hi.. can someone guide.. I believe that i am playing with rabit holes today only

  • i can only get one of the vhd files the other results in a timeout

  • did someone identify the xml files could this be part of an actual backup software ?

  • It was a fun machine. I think having a windows vm is pretty important. It will save you loots of time

    morph3

  • edited April 28

    Hello everybody,

    Some people did send me a pm about the vhd files. It is fair to everyone that I will say this here aswell, so everybody can read it.

    There is NO NEED to download the vhd files. However, you could do that. There are tools that will let you navigate/browse through vhd files remotely, over the network. This will let you grab just the things you need.

    About the machine:
    I tried to create a realistic scenario and I think it succeeded. Got alot of positive feedback so far, thank you guys.

    Cheers,
    L4mpje

  • Type your comment> @morph3 said:

    It was a fun machine. I think having a windows vm is pretty important. It will save you loots of time

    Agree. Wasted quite a lot of time here.

    "Respect to whom respect is due."
    Twitter: https://twitter.com/0x4242 | Web: http://0x4242.net
  • Well, I must say that download more than 5gig .vhd seems a bit strange :)

    Summa scientia, nihil scire.

  • Stuck now ive got access to the vhd files, a nudge in the right direction would be appreciated!

    Xess

  • Did someone remove the .vhd file?

    Shadow2Xx

  • Must say, one of the first machines I have done... Really enjoyed every minute and learnt a few new things as well!

    @L4mpje Amazing!

    fabiossilva21

  • Got user, you don't need to download GBs of files, you don't need a Windows VM.

    Need help with getting root, any nudges would be appreciated.

  • I'm struggling to find the "software" able to browse the .vhd files mentioned... Any hint??
    Thanks!

  • Type your comment> @cbx said:
    > I'm struggling to find the "software" able to browse the .vhd files mentioned... Any hint??
    > Thanks!

    Check your inbox

    Xess

  • @Xess
    Yo can you nudge me also, tnx!

  • Iam also struggling to find the software Iam using win10 if this helps

  • Just got root. Thanks @L4mpje for this realistic box <3
    Here are some hints without spoiling much..
    User: you dont need to download that vhd, it's possible to browse it over the same network. google ftw ;) what will you do if you can view windows files? poke the hen? if that doesnt work then check your nmap scans.

    root: root is easy than user. check newly installed stuffs and google again, you'll get root within seconds :)

  • Enjoyed this one, bit easeh, but yea i guess its good for beginners

  • edited April 28

    Really liked the way to user, gonna continue to root. Thanks @L4mpje

    death

  • Any hints on what I am looking for in the VHD files.. ssh keys? creds?

  • was Bastion down and too slow with everyone or just Me face this issue

Sign In to comment.