This is getting ludicrous. Are we expected to reset a box, once we got user, just to get a fresh hash?
Got user, submitted the hash within 5-10s and got invalid. The Machine was NOT reset during those few seconds, since my session is still valid (and I didn’t see anything related in the shoutbox).
Now, even after resetting the machine, the hash is the same and invalid
This is getting ludicrous. Are we expected to reset a box, once we got user, just to get a fresh hash?
Got user, submitted the hash within 5-10s and got invalid. The Machine was NOT reset during those few seconds, since my session is still valid (and I didn’t see anything related in the shoutbox).
Now, even after resetting the machine, the hash is the same and invalid
Then maybe that’s not the hash?
You mean user.txt?
If so that’s super weird and I’d suggest to contact HTB about that.
This is getting ludicrous. Are we expected to reset a box, once we got user, just to get a fresh hash?
Got user, submitted the hash within 5-10s and got invalid. The Machine was NOT reset during those few seconds, since my session is still valid (and I didn’t see anything related in the shoutbox).
Now, even after resetting the machine, the hash is the same and invalid
Then maybe that’s not the hash?
You mean user.txt?
If so that’s super weird and I’d suggest to contact HTB about that.
After yet another reset, a new hash was generated and it actually worked.
Also, finally rooted the machine.
Thank you @VbScrub for that machine. Really enjoyed it. Especially the part having to use “standard service tools” to get the information that one seeks
Learned five things from this box, great box! Thanks to @VbScrub !
USER
Thorough enumeration is the key and last but not least some googling if spider sense starts tingling.
ROOT
Try to peek inside. Learn who you are. Try to relate with something you gathered if Monster Reborn magic card unavailable (if can’t relate do some readings).
Scripts not gonna work, this box gonna hone your enumeration skill. Good practice.
Fun box overall. The storage method of the very first and very last password were a bit unrealistic to me but sometimes that’s needed for the learning experience.
@VbScrub Dude, I liked your last box, but I LOVED this box. It was kind of a love-hate relationship, but by the end it was actually fun and I learned a TON! I look forward to the other boxes you have queued up.
Normally I come for tons of clues, but I think this one gave enough clues to every step to keep moving. Prost and Cheers!
This was one of the best Medium difficulty boxes I’ve ever done! At times I got stuck thinking that something would be “too real life”, but this box has plenty of those real life, yet still balanced aspects