Conceal

Rooted…

Unfortunately, this machine will be one of the few boxes I give a dislike, solely because of the terrible vpn setup experience…

Having to spend hours and hours of guessing the correct vpn configuration and learning how to use an obsolete services -which BTW lacks basic documentation- is completely useless for pen testing, unless you are practicing for CCNP security, which I believe HTB is not the right place for.

From the beginning, I had all of the settings correct, expect for one word or even one letter, and it wouldn’t work, and I wouldn’t know why because the service keeps us completely blind.
If it wasn’t for the guys help, I would have never found out why it wasn’t working, even though I had 99% of the configurations correct.

Side note: I believe the priv esc method I used can only run once, and then it wouldn’t work, so the box needs to be reverted in order for it to work again, or a certain process needs to be killed.
This is what happened to me, and it says so in the PoC. But I could be wrong.
Either way, there seems to be more than one way to do it.

In general, if it wasn’t for the vpn setup experience, or at least if the vpn setup was straightforward, this would’ve been a great box, and a great practice for OSCP. But, Alas!

Thanks everyone for the help, and thanks to the box creators for their efforts.