Official Passage Discussion

Type your comment> @scorpion4347 said:

connection refused

Are you bruteforcing something you ought not to be?

yaa

anyone got a nudge for user 2?? been stuck for a long time now :frowning:

Rootedā€¦ pm for nudges

@scorpion4347 said:
yaa

This box doesnt need bruteforce

Type your comment> @soraa said:

anyone got a nudge for user 2?? been stuck for a long time now :frowning:

If you got User 1 already, then you need to be in-home and check all the files. :slight_smile:

Type your comment> @soraa said:

anyone got a nudge for user 2?? been stuck for a long time now :frowning:

Dont look far. :slight_smile: Just right infront of you

Type your comment> @gunroot said:

Type your comment> @soraa said:

anyone got a nudge for user 2?? been stuck for a long time now :frowning:

If you got User 1 already, then you need to be in-home and check all the files. :slight_smile:

oh wow i got it thx !!!

@kaungmyatmin said:
Type your comment> @soraa said:

anyone got a nudge for user 2?? been stuck for a long time now :frowning:

Dont look far. :slight_smile: Just right infront of you

TYSM :slight_smile: :slight_smile:

I have got user1. But canā€™t find a way to user2. I have read the above comments. Found a keygs directory in .loc***re. I guess something will be revealed by the files in it. Can anyone give a nudge, am I on the right path?

Type your comment> @gs4l said:

I have got user1. But canā€™t find a way to user2. I have read the above comments. Found a keygs directory in .loc***re. I guess something will be revealed by the files in it. Can anyone give a nudge, am I on the right path?

no, wrong path ā€¦ it is way more easy :slight_smile:

Type your comment> @Oxeeql said:

Type your comment> @gs4l said:

I have got user1. But canā€™t find a way to user2. I have read the above comments. Found a keygs directory in .loc***re. I guess something will be revealed by the files in it. Can anyone give a nudge, am I on the right path?

no, wrong path ā€¦ it is way more easy :slight_smile:

Thanks . Was so easy that I completely overlooked it. Got it now

root@passage:~# id
uid=0(root) gid=0(root) groups=0(root)
root@passage:~# whoami
root

Fun box, pm for nudges

Rooted thx @N0xi0us for your help at the root part.

Shell easy af, just google
User 1: look for juicy info files
User2: Its right there, but can be missed
root: Again, its right there, think about the covid comment and stay at home, the interesting part can be missed as well, but after googling you might know it when you see it.

Delete if it contains to Spoilers

Rooted!!
This box is like way easy in the beginning to almost a bit hard in the end. Thanks @N0xi0us for the nudge in the end.
Feel free to dm for hints ?

Stuck at root. Only seeing cups as a service to exploit, but canā€™t seem to find any article/exploit related to this version.

Type your comment> @m1r3x said:

Stuck at root. Only seeing cups as a service to exploit, but canā€™t seem to find any article/exploit related to this version.

Usual enumeration and little bit of Googling with sensitive terms will give you a good article. :wink:

do i must crack the hash for get user?

Type your comment> @0xstain said:

do i must crack the hash for get user?

yes. crackstation is enough.

Iā€™m so glad to see people have been enjoying the box so far!

Iā€™ve seen some great nudges in this forum. Iā€™m also open to feedback on the machine, so donā€™t be shy. PM me.

Here are my cryptic hints!:

  • Foothold: Bruteforce isnā€™t necessary, just be curious and google it.
  • User: Download your own copy and learn how it works. It will help you find the treasure!
  • Privesc: Look for rule-breakers! Sharing isnā€™t always caring.
  • Root: Stay close to home. Read a good book or write a novel! Thereā€™s plenty to do indoors.

Feel free to PM me for hints, tips, or nudges!

If you enjoyed the machine (or not), you can always leave a review & rating on the machines page.