Magic

slow slow slow i think everyone is trying to brute force it

Type your comment> @dc9th said:

bruh it’s so laggy

Yeah that’s why i will try to root it when everyone calms down and leave this box alone :slight_smile:

I am able to upload, but I can’t figure out the name of what I uploaded after it gets uploaded

Type your comment> @sakas4 said:

Type your comment> @dc9th said:

bruh it’s so laggy

Yeah that’s why i will try to root it when everyone calms down and leave this box alone :slight_smile:

Type your comment> @init5 said:

I am able to upload, but I can’t figure out the name of what I uploaded after it gets uploaded

Same here! Can’t open/find the original filename after upload…

just got www-data, can’t find a way to privesc

Meh, everything I try just results in a “What are you trying to do there?”. Wondering, if I’m on the right track, or if I should look elsewhere :smiley:

im www-data, found t****** password but aint working…rabbit hole?

Edit: yep, you need to find the real pass
now for root
Edit 2 : got root! cool box

@Try said:
Is the password found by bruteforcing is the way to go? doesn’t seem to work :frowning:

I thought that machines on HTB don’t require brute forcing for website login creds?

just got user privs

Finally a normal box…

@th3y said:
Finally a normal box…

What do you mean ? :slight_smile:

Can’t access the file after uploading under i*****/u****** section, can anybody PM me the nudge??

Any hints for root?

To whomever uploaded that burp request to docker.registry.htb, thx for the laughs :slight_smile:

@UrielY how did you upload the file? Everything I try results in “What are you doing there?”

Type your comment> @AidynSkullz said:

@UrielY how did you upload the file? Everything I try results in “What are you doing there?”

PM me

Spoiler Removed

how you bypass login

Just rooted the machine.
All in all an okay machine! :slight_smile: