@TazWake said:
While this would be a better alternative (for boxes where it is possible to do this and it doesnt break the box early - remember, RE you pretty much have admin access to get the user flag, the root flag is harder to get), from HTB’s point of view it doesn’t really solve the sharing problem. People can just share the hash then read the writeups and get the flag.
Sorry, can’t say anything about RE, haven’t done it yet.
And yeah, it doesn’t solve HTB’s problem at all. But to be honest, I personally think it is a none-problem. If people want to cheat, they will always find a way. And in the end they are cheating themselves. This website is (at least in my opinion) mainly an opportunity to learn and not to gather points… and if you don’t want to learn, then you’re only wasting your own time.
Still, rotating the flags seems like a reasonable idea to discourage “easy cheating”, like when you’re frustrated or so. And at least after sharing the hash you would still have to complete the steps of a walkthrough and maybe at least learn a little bit…