Finally rooted! Fun box for nubs and learned a thing or two. I will say there has been a lot of resetting of the box unnecessarily. I reset it once myself but only because someone overwrote the needed binary with their reverse shell (LOL). Other than that the box was pretty stable.
Initial: Don’t reset the box over and over when you cant figure it out, start paying attention to hints given in front of you, then go from there. Basic OSINT is your friend.
User: Learned a little about a new language, make sure to, once again, read whats in front of you to get user.
Root: I overthought this one way too much. My suggestion is to make sure you understand basic operations in the Linux OS. Then it will click (at least it did for me).
can someone please PM me and give me a tip on root? I can see the u****-mo**.d and permissions are user r*** group s******n, but I really have no clue how to escalate. Monitored the output for pspy but wasn’t helping all that much. I can see a couple of cp commands running every 30 seconds but not sure how that’s useful
Rooted!. Nice box with new interesting things.
For User->Google around for that you got.After you got into system back to old day!.
For Root->If you are attacker what will you do to notice you hacked their whole system?
In the root part others are messing the same thing even it is correct, it will be overwritten by others and those concurrent resets made me frustrated.
I’m done with this box and got a root shell not long after getting user. I noticed one subtlety about modifying files towards the end and wondered why a certain approach worked but another did not. For those who have completed this box, I would be happy to share this small detail and maybe we can figure out what’s happening here.
@zelensky said:
I’m done with this box and got a root shell not long after getting user. I noticed one subtlety about modifying files towards the end and wondered why a certain approach worked but another did not. For those who have completed this box, I would be happy to share this small detail and maybe we can figure out what’s happening here.
I think I know what you mean, so feel free to PM me.
@sparkla said:
Why are people outrageous like that? I cannot understand this, ever…
Can someone confirm or deny that u****-m**d is the way to go? Sank too much time into this already. Happy for PM