Postman

Rooted.
pm if you need a nudge

Easy in the end. But tricky to get the initial low level shell.

POSTMAN Rooted yesterday… ROOT AND USER. Happy to help in private message. I will only give hints. Root was a piece of cake. User was the more interesting part. :slight_smile:

if your the other person on r**** right now and want to work together so we are not just DOSing each other im down. I have already figured out the exploit to get shell but need enough time connected to enumerate.

Stop using hydra on port 22… its causing ddos on the system …

And yes i can see your IP…

Hey folks!

Anyone able to give a pointer on foothold with r****? I am like 99% of the way there but unsure what parts of my script I need to tweak to get it to work. I am new to HTB, but a avid fan of VulnHub. This is a bit harder but certainly gets the blood flowing more!

Thanks from NZ!

Type your comment> @yyhh01 said:

And yes i can see your IP…

wanna see my PP ?

well i got user. but i think its just because one of you dirty hackers left your droppings in /tmp >,<

Got root! But I skipped user, can someone explain me in pm how to gain user from r***s without going straight to root? Thanks :slight_smile:

nice box
Finally rooted
I would say thanks to iamnobody and Chantal2019 for nudges

root@Postman:~# date;hostname;whoami
Wed Nov 13 11:36:58 GMT 2019
Postman
root
root@Postman:~#

Spoiler Removed

managed to get root, thanks @MrPennybag and @sqw3Egl for the nudge on foothold!

Looking for some help, I can’t get john to crack i*_*.b
used ***2john.py and rockyou and still nothing.

Type your comment> @strix553 said:

Looking for some help, I can’t get john to crack i*_*.b
used ***2john.py and rockyou and still nothing.

Same :frowning:
edit: just my curly hands thx @bumika & rooted

Interesting. PM me, and I try to help you.

Hi guys, someone can give me some hints about the initial user enumaration? I’m on the right way (i guess) but i can’t figure out how to find the right user to exploit the r**** shell.

Could anyone help me with Postman machine ?
In the begining…I’m stucked with Webmin page, and i don’t know what i need to didIf you can’t understand me, could you talk me ?
I’m brazilian, and i don’t wanna use translate. I need traine my english and my hacking skills LOL

Well that was embarrassing, trying to open a door with the key the wrong way around - ■■■■!

User + Root = Root Dance!!!

Shout out to @dnperfors for the nudge - thank you.

Can someone PM ME?

I am trying to ssh as the user after using john successfully. I keep getting connection closed by xxx port 22. Is this normal?