Nightmare

I can read data from db but stuck there …

May I please some hint?

There is a service that can be used differently than you think. What you already have is a hint from sy…n.

I hope it isn’t spoiler

I can see all the files using a particular service after logging in as user from creds found. but stuck on approach to low priv shell.any hints?

The hint for first priv esc is the first posts. How get root is bigger question. Any hints?

Hmm, I can see three potential misconfigurations / escalation vectors to root, and one very strange error message… and have no idea how to exploit them, there’s always something missing. Any hint?

Completely stuck on privesc, any tips?

guys i cant figure out starter can see couple of bugs but dont really know where to connect dot

Any hints on priv esc to root from user?

I’ve managed to get “full” user privs, but it’s not as helpful as I dreamed. I can’t find a final piece to make the obvious exploit work :frowning:

things aren’t always what they seem :wink:

I got user. I used some script to find e… found, tried and give up :frowning:
Here you will need more work that only find and use…

@Mawekl said:
I’ve managed to get “full” user privs, but it’s not as helpful as I dreamed. I can’t find a final piece to make the obvious exploit work :frowning:

any progress on you side mawelk i got stack too :frowning: Pm if you have passed that spot please.

Got root, hard machine I must say. User to root is easier though!

Mawekl has got root

@laylow said:

@Mawekl said:
I’ve managed to get “full” user privs, but it’s not as helpful as I dreamed. I can’t find a final piece to make the obvious exploit work :frowning:

any progress on you side mawelk i got stack too :frowning: Pm if you have passed that spot please.

Hey, I wasted a lot of time on looking for a missing piece, but it’s wasn’t the case. Just try something easy and add some spices.

Regards.

What a nightmare… awesome box… got root just before retirement… :smiley:

Holy smokes batman, this box was a trip. I picked up a couple of nice new tricks though. I’m glad I finished it before retirement. Now that I’m awake from the nightmare, time to go to bed. lol

@decoder and @stefano118 thanks for a really nice box!

i didn’t get root almost tho then it retaired thanks to Mawekl for the help mate but i had picked some daaaam good tricks…