Swagshop

Ok, I’ve encountered alot of error 503s while I’ve been attempting this box. As I’m a noob could someone explain to me what might cause that error so that I can make sure that I am not part of that problem?

i literally can not do a single thing on this box because everytime i find something or get close it gives me a 503 and then i have to wait a couple min before i can even do anything this is so annoying

Just ridiculous at this point tbh… Its more of a race and who can execute the reverse shell first rather than hack the stupid box man im actually raging, been at this for HOURS man and all i see is 503 loool only had the reverse shell once cos every time after it gets ■■■■■■ bricked the website… VIP server doesnt even work on this box ■■■■

Same, same-same.
I’m going to retry under cover of darkness. This very EVENING.
#Naps

Pretty fantastic box. Not overly hard but fairly realistic and gave me several “I’m Stupid” moments.

@hxmo US VIP was very stable. I had shell for the last hour or so with several stupid CTRL+C moments requiring me to re-exploit.

Got my 20 points for this lovely and frustrating box. Thanks @ch4p for the work <3
PM me if you need help.

Got root! Great Box.
Returning the favor, if anyone needs a tip, feel free to pm.

@AndreiPintea @NPCMaster Thanks!

i got user but I’m struggling with getting root any hints would be nice

Rooted! The 503s and 404s has been a tough challenge! This is my 3rd box and learned something from it. As opposed to those people who said that nothing can be learned from this, I can say that this is a good practice for beginners.

Thanks @ch4p for this box! Thanks @mpzz and @SN01 for the small nudges.

I am not sure how most of you did it because I can only see MY “special” order to get initial shell. If anyone has time to spare, I’d like to compare my steps to yours.

PM me if anyone needs a little push to the right direction.

is anyone getting the following error with one of their exploits today?

tunnel = tunnel.group(1)
AttributeError: ‘NoneType’ object has no attribute ‘group’

It was working fine for me yesterday and I changed the parameter accordingly, PM me

Type your comment> @sornram9254 said:

Stuck in 503 many times. ?
Please exploit carefully. ?

I’ve come to find that’s actually supposed to happen :wink:

@UIDEQUALSZERO said:
is anyone getting the following error with one of their exploits today?

tunnel = tunnel.group(1)
AttributeError: ‘NoneType’ object has no attribute ‘group’

It was working fine for me yesterday and I changed the parameter accordingly, PM me

The only exploit i used didn’t require a lot of change, maybe like a few chars. But to answer the question nah i just tried it again and it worked. Might be the wrong version if it’s the exploit i’m thinking of

got root and thanks for those who helped me…pm for hint…

My first root!!! thanks @marine

ROOTED !!

Thanks @marine for the help…
PM me for hints…

Type your comment> @Tepidangler said:

Type your comment> @sornram9254 said:

Stuck in 503 many times. ?
Please exploit carefully. ?

I’ve come to find that’s actually supposed to happen :wink:

This is misleading, you can root this box without causing a 503.

Type your comment> @UIDEQUALSZERO said:

is anyone getting the following error with one of their exploits today?

tunnel = tunnel.group(1)
AttributeError: ‘NoneType’ object has no attribute ‘group’

It was working fine for me yesterday and I changed the parameter accordingly, PM me

Same here bro!

This is my first box. I proceeded to some enumeration regarding ports/services and started tinkering with the website. Found a couple of folders/files which seem interesting but I’m basically stuck. If anyone can PM me with some hints it’d be really appreciated.

I’m having issues finding where I should upload my shell, I see that I can upload M*****o extensions in the downloader page but I’m missing a piece of the puzzle. Could someone PM me a hint?

Edit: rooted. PM me if you need a nudge. @ch4p the service unavailable errors were a pain but imo it demonstrates why knowing what your exploits do is crucial. Overall a fantastic box!