Just got user. Respect to @zaBogdan for the help. Initial enum is really important.
For root, I do understand what should be exploited.
Seems like another user is needed to send meaningful messages.
Should I found an RE on the wb s****r?
Thanks for any nudge!
In my opinion this box could be considered insane. Thank you @qtc your skills are really impressive.
User hint: Enumeration and understanding the logic behind the applications. Anyway, my real hint is to study everything you’ll find (if you haven’t seen it already) to get to the solution.
Root hint: Enumeration. In my opinion it’s an insane machine, and you have to try hard. Look at what’s going on in the processes, understand how the applications communicate, and find a way to execute commands from one side to the other. Use google even this time.
I believe I know what technologies are at play and I know what the name of the box is referring to. I even tried a promising exploit on the co***ct page regarding the name of the box but it didn’t work.
Should not i be able to login somewhere as my customer account using connected auth account? If you willing to clarify how things work in this machine, i can pm my steps.
rooted.
This box is incredibly amazing but is definitely not a hard box, is fucking insane and complex.
Very good and hard work behind, @qtc (and try if possible to re-rate this box to 50 points please xD)
Rooted … But man what a frustrating box. Honestly whoever ranked this box “Hard” was not thinking straight. Just to get user requires you to learn every unrealistic attack on OA*** there is. And there is a guessing part, which shouldn’t be a thing.
There are many stability issues on the website that I ran into a lot. I wish there were more “helpful hints” along the way. It made the learning experience not enjoyable.
OFF: “Type your comment” - forum engine seems to be a little bit strange, never touched the “Post comment” button, but sometimes just browsing the forum posts the default “Type your comment” message here. idk, why…
Rooted. Special thanks goes to @seekorswim and @lorenzooo, for nudging me to the right path. I can’t belief I got stuck on something so obvious in retrospect. Great box, user part very clean, root part very dirty, haha.
I thought it was very difficult, but it gave me a good lesson in staying zen and perseverance.
Hi all; am now on the “admin” page and have quite some new information; I think I know in general what I would like/need to do next but I cant put the pieces in place yet. some nudge in the right direction would be highly appreciated. pm for hints. thanx