Traverxec

Type your comment> @cpc6128 said:

Did anyone got the file via web or also only with gussing on cli?

You’ll get something via web… before that you need to look carefully and read any configs you find after you get the initial shell.

Rooted.

just rooted! some hints
user: as someone said, if you can’t see it, it doesn’t meant that it doens’t exist
root: if it works, go small :slight_smile:

I was able to solve on i3-gaps with 3440x1440.

Resolution isn’t the only way to skin this cat. :wink:

this box is trash. it only took me like 5 minutes to figure out the initial shell foothold but it’s so unstable and crashing every 2 minutes and half the time port 80 just doesn’t even show up or respond.
i’ve wasted literally hours just trying to keep the shell open long enough to actually do anything.

@jkr is this intentional? it’s so frustrating

@dr0ctag0n its not intended. There is a HTTP dos vulnerability on it that people love to try by some wierd reasons!

Type your comment> @stoffern said:

@dr0ctag0n its not intended. There is a HTTP dos vulnerability on it that people love to try by some wierd reasons!

the server was not booted at all in the VIP labs, i just booted it fresh after waiting several days since release and it’s still doing that. Tried using the initial shell to save a binary shell and run it and it still stops responding after a few mins. :confused:

got user password cracked… but its not working when i ssh?!!

Spoiler Removed

Epic box :^)

Thanks @w4x for nudges

root@traverxec:# id
uid=0(root) gid=0(root) groups=0(root)

Was anyone able to get a shell on the box without using the common tool for automating things like this? send me a message if you have a way please.

Edit: Please ignore. I am an idiot and never thought to read the source code in this tool.

Rooted! PM me for hints :slight_smile:

Rooted very nice box :smiley:

Root was just “Wow!”

That final mental leap to get root was really, really cute. Maybe think outside the terminal box to get this one if you’re struggling ;). Nice work, jkr.

Finallly got root . Thank you @rholas for help.

pleas PM if need any hints

¡Rooted! I can say that I learned interesting things with this machine. My advice and hint are.
User: Always check the configuration files and read the permissions carefully.
Root: gtfo bins is the key, nothing more and nothing LESS.

This thread can help: https://www.reddit.com/r/hackthebox/comments/dy8t4j/traverxec_help/

There’s someone massively spamming the box with broadcast messages. Can anyone help?

EDIT: Rooted. That was nice :slight_smile: PM for nudges.

got user password cracked… but its not working when i ssh?!!