Hint for Waldo

@MindOverflow42 said:
hi guys I need a help on this macine, I can write some php code in /.list/list11 but i don’t know how to exec it. I have got all sources files but i can’t find the way.

So you cant execute code but you can read files…maybe there’s something useful you can find.

@safin said:
can someone tell me how to login to ssh
it just gave me
Load key “key”: invalid format
and
Permission denied (publickey).

Hi, I have your same issue did you find a solution?

@flexkid said:

@safin said:
can someone tell me how to login to ssh
it just gave me
Load key “key”: invalid format
and
Permission denied (publickey).

Hi, I have your same issue did you find a solution?

no what about you ?

If something is an invalid format check there are no bad characters. Look for \t and /.

If trying to ssh -i you should be passing the private key

Had the same thing at first, then i just subsituted

“:%s/\n/\r/g”
I had to also substitute backslashes
“:%s/\//g”
(when done in vim… sed is probably slightly different).
The key should then be in the proper format

@safin said:

@flexkid said:

@safin said:
can someone tell me how to login to ssh
it just gave me
Load key “key”: invalid format
and
Permission denied (publickey).

Hi, I have your same issue did you find a solution?

no what about you ?
Nothing still stuck

@Underworld said:
If something is an invalid format check there are no bad characters. Look for \t and /.

If trying to ssh -i you should be passing the private key
Thanks for the suggestion I think I fixed that issue but now I have this error:
m*****@…: Permission denied (publickey).
I tried with the other user no**** but nothing do you have any hint ?

@ZaphodBB said:
Just getting initial foothold - unless Im completly mistaken and I’m barking up the wrong tree, it seems to me like the detaisl for initial users are gained by directory traversal - php explitation.

@ZaphodBB I am able to list

I am able to list the contents of all the folders but can’t retrieve the keys, keeps giving me a false entry

If you are able to see the key for a specific user then you might need to format it first

Still having an issue with the private key, did the formatting and removed the bad characters.

Getting the Permission denied (public key) message

@felixgmathew said:
Still having an issue with the private key, did the formatting and removed the bad characters.

Getting the Permission denied (public key) message

Didi you resolve ?

@flexkid not yet, I’m sure it’s something dumb

@felixgmathew said:
@flexkid not yet, I’m sure it’s something dumb

me too but it’s very tedious xd

@felixgmathew said:
@flexkid not yet, I’m sure it’s something dumb
Done, be sure to read the correct file

I have a rb*** with the m***** user and I don’t know how to continue … someone have any hint for me?

@flexkid said:
I have a rb*** with the m***** user and I don’t know how to continue … someone have any hint for me?

Not sure what the privesc here , i ssh’ed as n******

@flexkid said:
I have a rb*** with the m***** user and I don’t know how to continue … someone have any hint for me?

Find out what rb**** is and how you can get from that to where you want to be.

@felixgmathew said:

@flexkid said:
I have a rb*** with the m***** user and I don’t know how to continue … someone have any hint for me?

Not sure what the privesc here , i ssh’ed as n******

You’re not quite where you need to be yet. You need to focus on finding Waldo before you can do anything else. Be sure to enumerate your home directory fully.

@Skunkfoot said:

@flexkid said:
I have a rb*** with the m***** user and I don’t know how to continue … someone have any hint for me?

Basic Linux Privilege Escalation - g0tmi1k

Find out what rb**** is and how you can get from that to where you want to be.

@felixgmathew said:

@flexkid said:
I have a rb*** with the m***** user and I don’t know how to continue … someone have any hint for me?

Not sure what the privesc here , i ssh’ed as n******

You’re not quite where you need to be yet. You need to focus on finding Waldo before you can do anything else. Be sure to enumerate your home directory fully.

Thank you for the hint when I’ll return at home I’ll take look :slight_smile:

@Skunkfoot said:

@flexkid said:
I have a rb*** with the m***** user and I don’t know how to continue … someone have any hint for me?

Basic Linux Privilege Escalation - g0tmi1k

Find out what rb**** is and how you can get from that to where you want to be.

@felixgmathew said:

@flexkid said:
I have a rb*** with the m***** user and I don’t know how to continue … someone have any hint for me?

Not sure what the privesc here , i ssh’ed as n******

You’re not quite where you need to be yet. You need to focus on finding Waldo before you can do anything else. Be sure to enumerate your home directory fully.

Thanks skunkfoot, I overlooked what was right in front of me