ServMon

Just started the box, any tips for a foothold?

This box has been such a headache for root, just so unstable.

Hello, the “PLUS PLUS” is intended, I found a way to privesc. Can anyone confirm please?

no bruteforce needed, stop it please.
After ROOT please remove all changes before to go away

no hints needed, this machine is really OSCP like. Read carefully all files you can get

C:\Users\Administrator\Desktop>ipconfig | findstr IPv4
IPv4 Address. . . . . . . . . . . : 10.10.10.184

C:\Users\Administrator\Desktop>whoami
nt authority\system

foxlox
feel free to ask to foxlox#1089 only on discord

I’m starting to feel like it’s not brute forcing that’s causing issues. I’m VIP, there’s literally me and one other guy on this box and no web traffic that I can see. The Web UI is still trash.

This is quite a straightforward machine which I would recommend to anyone preparing for OSCP. I got user but not root yet because the machine is just so unstable and unresponsive.

Machine is not unstable, you need to read ini++ file and all will be clear.

Type your comment> @foxlox said:

Machine is not unstable, you need to read ini++ file and all will be clear.

Is there a setting in the INI file that makes the WEB UI run like a piece of a ■■■■ or something?

Type your comment> @StanleyJobson said:

Type your comment> @foxlox said:

Machine is not unstable, you need to read ini++ file and all will be clear.

Is there a setting in the INI file that makes the WEB UI run like a piece of a ■■■■ or something?

If you mean UI not loaded properly, try a different browser. I had issues with firefox rendering it properly one time out of 20, but didn’t have any issues with chromium.

Hm, I just reset the box and now it is working perfect even through Firefox. Not sure what was going on there…

Hey can anyone help me i am getting 403 during login ?

Okay, so got user. And yes, the box is unstable, had to try the same thing like 20-30 times to get the output.

stuck on the final step… not sure how to do this without the restart… could use a nudge can’t find any documentation to work around it.

gave up with privesc. Obtained pass for ++ but unable to access the webpage…

Type your comment> @HootHoot said:

gave up with privesc. Obtained pass for ++ but unable to access the webpage…

You’re probably missing something there… why do you think you can’t access it? What way could you change that?

Once access to that page, the CPU usage goes up dramatically.

The last message I can get is 403 but the pw is extracted as stated.

Gosh wt happened to the box?

It turns out that I was lazy.

So, oddly enough, I had access to the page. I took a break, the server was reset (because of course it was) - I then proceeded to follow the exact same steps I took to set up the method of access to the Web UI, and it no longer works! As such, I am just not going to come back to this for a while, there’s just too much ■■■■ that’s unstable or doesn’t work consistently and it’s too frustrating to complete.

Managed to get the login page after many tries. Does in fact work better in chrome.

I am not getting any login forms its very buggy

Rooted. Easy box but very unstable especially during priv esc part.