Craft

I have a shell now. Albeit a limited one by the looks. Found some creds, looking to use them.

I keep having connection issues between ping, dirb, Nikto , all the usual tools, anyone else this issue?

Type your comment> @mojorisin said:

I keep having connection issues between ping, dirb, Nikto , all the usual tools, anyone else this issue?

make sure the VM is still running. seems like with the new time limits set up this happens to me all the time and I have to go back into the dashboard and re-initialize the box.

Type your comment> @dr0ctag0n said:

Type your comment> @mojorisin said:

I keep having connection issues between ping, dirb, Nikto , all the usual tools, anyone else this issue?

make sure the VM is still running. seems like with the new time limits set up this happens to me all the time and I have to go back into the dashboard and re-initialize the box.

Yeah I’m running it off a dedicated laptop and the VPN is always running, have you managed to get dirb working at all?

dirb works for me, maybe you’re not using the right protocol/port?

Got user with a few nudges from @Leonishan and @jfx41 (respect on its way)
Got root about 5 minutes later.

Great box, learned a lot once again.

Rooted! A good box a big shout out for the people who helped me thank you so much guys. If anybody wants help feel free to PM :slight_smile:

nothing resolves lol … edited hosts, still nothing…

Type your comment> @dr0ctag0n said:

dirb works for me, maybe you’re not using the right protocol/port?

Took a while seems to be fine now, it wasn’t even getting a ping. Protocol and ports set now to get the initial foothold, nudges always welcome :slight_smile:

rooted, thanks @Tohzzicklao
PM if you;re stuck

Hey guys, could someone give me a nudge? I found a s** service running in a weird place and some pages that don’t resolve. Tried digging but pooled out an empty shovel :slight_smile:

Thanks to @naveen1729 for helping me out of the rabbit hole

Nice box :slight_smile:

User

It is necessary to see what the developers have changed in the code of the application, it is possible to see something interesting. The part of the RCE is to see how to take advantage of the language and the part of getting out of jail was complicated, sometimes one relies on any script that is in the machine when you can modify it and see if it is returning what it should.

Root

The part of the root is simple, just copy and paste a part of “that” and get what you want according to the documentation

rooted … very good box

rooted, If someone needs a nudge, pm with what you did and where you stuck exactly

Wow, I really like this box! Even though I needed nudges as I was overseeing the obvious things and began overcomplicating things and then followed the rabbit… ?

Wondering if v***t is a r-hole

Are the links supposed to resolve? I’m not getting anywhere on my foothold, here.

Edited to remove spoiler

Spoiler Removed

any nudge (apart from the Python one;)) will be appreciated.

are you guys using any tool for the initial foothold?