Official Intense Discussion

135

Comments

  • edited July 2020
    This box is really awesome and I enjoyed all the way upto first shell.
    Onto root!

    A Chemist doing Penetration Testing - Check the Story here: BinaryBiceps

  • edited July 2020

    Finally user!!!! What a ride that was.....

    Thanks to @HomeSen for all the help...

  • Rooted.
    Kudos to @sokafr for this great box!

  • rooted! nice box @sokafr

  • i really cant get anything any clue

  • Damn, finally rooted.. Thanks !

    Feel free to PM me

    Hack The Box

    Write ups FR : https://hackingdom.io/

  • edited July 2020

    would appreciate some guidance on the last steps to the root - how to turn byte-wrangling over the the wire into something evil. I can read / write / copy but no idea how to use that.

    🙇🏻‍♂️

  • need a nudge for S**i part of foothold. really stuck :(

    Hack The Box

  • anyone can help me in b*n exploitation part

  • edited July 2020

    I hope it not spoiler...
    Use correct box for rooting.
    I think Kali box enough for all and I made big mistake
    Take box identical to target

    UPD
    Rooted
    Thanks @sokafr for box, @MrSHolmes and @Hato0 :)

  • Hi, could someone share a nudge on how create an error or a long query in a sqlite request, please ? :smile:

  • check out the available sq***e functions and find what you are searching for :)

  • Type your comment> @voydstack said:

    check out the available sq***e functions and find what you are searching for :)

    Well, I feel like I have look at the documentation quite extensively and I didn't find anything that i could use. With the filters at least.
    I could really use a more specific nudge, maybe in PM if you feel like it's spoiling.

  • Thanks @traut for the nudge.

  • If someone is available to check my syntax for the last part of privesc, I would greatly appreciate a PM. Thanks.

  • Anyone that solved the B*F please PM me, I'm stuck on calculating an O****t

  • Thanks to an very patient @ollypwn I got user yesterday night. now I'm stuck on getting a shell :blush:

    Hack The Box

  • Shell is not needed !

  • @sokafr I figured that out, when the service kept on crashing as soon as I had a connection :blush: still looking for another, more safe, way

    Hack The Box

  • edited July 2020

    is anyone willing to give me a nudge for the final part? :) please pm

    EDIT: I solved it finally. my first time approaching this kind of exploit, thank you so much for the box and the experience :)

  • finally finished the box. What a learning journey it was, especially that nasty road to root :smiley:

    pm for hints or emotional support

  • @traut said:
    finally finished the box. What a learning journey it was, especially that nasty road to root :smiley:

    pm for hints or emotional support

    Fully agree! That was a puzzle and a half. What an amazing box @sokafr. Thanks :blush:

  • edited July 2020

    Thanks to @sokafr for uploading this amazing box, the root part of this machine was impossible for me, but thanks to the explanation given by @CHUCHO and @fr0ster I was able to root it

    My hints:

    User:

    • In those types of cases you need to try harder
    • (Shell) Don't forget the first rule of the Fight Club

    Root:

    • It's the first thing you found, research on birds, ropes and don't give up. I was able to get this part thanks to the help of @CHUCHO and @fr0ster

    if this is spoiler, feel free to remove it

  • Finally! That was an intense machine! Thanks @sokafr for the learning experience. Not even sure where to start with hints as there are about 7 attacks/exploits required here. Happy to give nudges but be required to do some work on this machine.

    $ whoami && id && hostname
    root
    uid=0(root) gid=0(root) groups=0(root)
    intense

    4t0ys3d

  • Does anybody know if sn**d restart once in a while?

  • The box seems pretty unstable, dropping connection every 1-2 minutes for 30 sec.
    Even after 2 reset same thing...

    'These violent delights have violent ends'

  • edited August 2020

    I'm looking for a nudge on root. I think I'm on the right track, but need some help with the bird.
    Update: Past the bird now, hopefully nearly at the end...

  • i know there is s** but don't know how to exploit it !! anyone can help me ?? please

  • Type your comment> @n33r47 said:
    > i know there is s** but don't know how to exploit it !! anyone can help me ?? please

    Source code and a strong googling will help you out.

    A Chemist doing Penetration Testing - Check the Story here: BinaryBiceps

  • @gunroot okk bro i am trying !!!

Sign In to comment.