Access

Hey guys, just started the box a few minutes ago.
Scanned ports, and “loged on” the f-- one.
ls & dir aren’t recognized, fine.
But when I use LIST I get this error :
list
150 Opening ASCII mode data connection.
425 Cannot open data connection.

I hope there is no spoils, but I am really wondering if it is intended and if I need to check how I can fix this, or if there is a problem…

EDIT : Ok so I was using nc or tel*** to connect in f**, then I just installed and tried with another and it’s working … Sorry guys ! (if someone knows why it wasn’t working with these two can you PM me the reason :slight_smile: )

Rooted! Great box, and I learned a lot from this box! If anyone having difficulty on this box, feel free to PM me!

Thank you very much @egre55 for this awesome learning box!

@qdada said:
this box is exposing how much of a N00b i am. I can do things that normally a privileged account such as Administrator should do, including create new accounts, even add myself to Administrator group. But I am not able to understand why i cannot read the root.txt

Same boat !!!

Yo !! Finally I got root !!!
Thank you @TazWake :slight_smile:

got user already, but pretty stuck with root. i don’t actually know what to do with r****, since im pretty newbie with windows privesc… if someone could pm me i would be very thankful

Stop reseting the box every 10 minutes. There’s other people trying to work on it.

I Am Trying To Root it via “Runas” command

I learn full sysntex, But not success

Can anyone Help me for it

rooted!

Overthiking of how to PE.
Actually just need to run a command with correct syntax.

I finally rooted this machine… thank’s guys…
I have to admit that until now the error was that i’m more lazy than the admin…
thank’s!!!

not sure what is going on here FTP seems crackers… how do you enumerate ftp when it hangs in a ls or dir

Priv esc was super annoying, but in the best possible way. Just make sure you get the syntax down right, google what you are trying to do if you get stuck. There are examples of people doing this. Take what you learned from that and apply the lazy admin thing everyone else keeps talking about.

Many people have said this but I think it needs to be resaid: You guys need to run the commands you write in a windows machine, it will save you A LOT of time. I spent a day trying to make the r**** command work from t****, but it took me no more than 15 minutes to figure it out on a windows machine.

hi, which tool do you guys used to break .pst zip file?

@nagarajnow said:
hi, which tool do you guys used to break .pst zip file?

Maybe you don’t need to break it per se, there should be a more “passive” way to open up the .zip

Hi, any anyone assist me with getting the privesc for the root flag, I have tried do many commands to elevate but seem to have brickwalled on this :frowning:
PM me and I can tell you where I am at, I believe I am close but cannot seem to get the syntax to work.

Spoiler Removed - egre55

As an FYI for those that might make the same mistake as me…there are multiple tables with useful information. Not just one.

Rooted this box yesterday, i liked it! Good box to learn some new tricks on.
My most valuable tip for user.txt was to check how you get your files, if they are corrupted. After that it’s just reading and executing step by step, with a little bit of searching.
For priv esc, just use the command that’s been stated here a lot. It finally worked for me, after i replicated the environment on my own windows box, and then crafted the string until it did what i wanted it to do. When you do it on your own windows box you can check for syntax errors etc. My tip: Just write your command on your windows box until it does what you want, then change the paths and copy it over to your user shell. :slight_smile:
If anyone needs help, feel free to PM me, i don’t spoil, just nudge you in the right direction.

Would really love some help on getting user. I have the 2 files and am sure they are not corrupted. Tried to cat these files for any useful strings but couldn’t find any. Also used m**tools cmds, but couldn’t read the header. Any tips or DMs would be really appreciated!

@SneakyManatee said:
Would really love some help on getting user. I have the 2 files and am sure they are not corrupted. Tried to cat these files for any useful strings but couldn’t find any. Also used m**tools cmds, but couldn’t read the header. Any tips or DMs would be really appreciated!

Tip: Keep trying to use that tool. Check out for every command you can use with it (there’s more than one). Google is your best friend now.