Props to @egre55 for this box. Embarrassed to admit how much time I spent down the wrong rabbit hole. As frustrating as that was, I think I learned so much more because of it. Fantastic box.
If someone who really understands this box would DM me I would love to ask a couple of questions to clarify some things.
I’ve gotten user.txt but kinda stuck at running the magical command to read the root.txt.
The posts in here has been extremely helpful (so is SS…) but I am not sure if the way I have arrange the options using that magical command is correct.
Would anyone be available to help nudge me in the correct direction?
So grabbed the A*****.z** and M** files. Went back an have tried redownloading them using the b***** setting, but fcrackzip using rockyou is failing to find the password for the Z** file. Is there something else I’m missing?
So grabbed the A*****.z** and M** files. Went back an have tried redownloading them using the b***** setting, but fcrackzip using rockyou is failing to find the password for the Z** file. Is there something else I’m missing?
Go through the M files. It’s painful but you will find what you need.
So grabbed the A*****.z** and M** files. Went back an have tried redownloading them using the b***** setting, but fcrackzip using rockyou is failing to find the password for the Z** file. Is there something else I’m missing?
Go through the M files. It’s painful but you will find what you need.
Haha, thanks a ton. Took about 20 seconds to find the password. Not sure why it didn’t occur to me to just take a look in the M**
So grabbed the A*****.z** and M** files. Went back an have tried redownloading them using the b***** setting, but fcrackzip using rockyou is failing to find the password for the Z** file. Is there something else I’m missing?
Go through the M files. It’s painful but you will find what you need.
Haha, thanks a ton. Took about 20 seconds to find the password. Not sure why it didn’t occur to me to just take a look in the M**
USER:
To get the user the main advice is to be aware of the output of the commands you make. If your files are corrupt (100%) it is because you do not pay attention to the commands’ warnings.
ROOT:
Look all the users directories, u will find a interesting command that u need to use. Obtain a shell and download the file that u need. Thats all.
GOOD LUCK
I’ve given up on this… I’ve read countless forums, documents, and anything else I can find to help. Including here. I just can’t grasp the concept and will no longer waste my time.
Hey, everyone. This is my first box and I could really use some guidance. I was able to get user, but am running into some weird issues with getting root. Sometimes, I can use the proper syntax to get an elevated prompt. From there, I can navigate to the root flag and change permissions and all that. I can’t read the file, and I’m working through figuring that out, but it’s very hard to make any progress across box resets. It seems that every so often, my privesc command won’t allow me access when I am positive that I know it works. I can reset this box myself and my commands will work every other time or so. Is this supposed to happen? Tell me if I’m missing some crucial information. Thanks!
Wow, I finally managed to get the root flag. You have to keep messing around with r**** until you get the correct way to do it. Also, focus on t****t, and ask yourself why you don’t get any output, and figure out a way to read the output somehow.
This is a frustrating machine, but once you get the root flag, it feels great hehe. I learned a lot about windows with it, great job to the one who created it.
I rooted the box by using r**** and giving myself the necessary tools to do the job (if you know what I mean). If you got the privesc with a different method, PM me!