Official Reel2 Discussion

Type your comment> @CyberVaca said:

Wtf winrm? rabbit hole? I have valid credentials :neutral:

yeah… I am getting the same here.
Got 2nd user creds but winrm is not playing the game… what am I missing?

Type your comment> @acidbat said:

Type your comment> @CyberVaca said:

Wtf winrm? rabbit hole? I have valid credentials :neutral:

yeah… I am getting the same here.
Got 2nd user creds but winrm is not playing the game… what am I missing?

Ok got passed that part (yay)

Next hurdle … :neutral: , challenge

a slow start on this one. I have a bunch of users, and admin access to the high port site, but haven’t been able to turn it into anything so far.

Is going down the J*A path the right way for root?

Hey guys, got rooted but without NT\Authority System. Is there any way to get root shell? If someone knows i will appreciate for helps

Rooted! Hard box but very entertaining! Congrats @cube0x0!

PM if anyone need a little nudge!

Rooted, awesome box and I learned a bunch of new things. Great work @cube0x0
A bonus when you also understand the language being used :smiley:

İt’s getting harder !! Brain freze.(

Great box, harder than what i expected.
I dont have many hints to share without spoiling too much, but i suggest to have a look at a sneaky box.

to whom it may concern:

just because something is possible doesn’t mean you should do it.

please stop changing passwords for accounts other players are dependent on!

Rooted. A little bit ez box, a little bit hard box. If you need some help, DM me.

Hint: you have to learn powershell very good. If you have admin creds, you cant get user.txt. So, please “step by step”

this was by far the hardest machine i have ever played on HTB.
i couldn’t have done it without the knowledge and patience of @acidbat .

for me, with Windows machines there is often the additional burden of having to read Microsoft-written documentation… which just always gives me the creeps :tired_face:

still, i learnt a lot :smile:

tack så mycket @cube0x0

Does way to connect from Linux to Reel2 exist?
I don’t have winbox at now.

Type your comment> @fr0ster said:

Does way to connect from Linux to Reel2 exist?
I don’t have winbox at now.

Sure does mate :slight_smile:
Kali has even a powershell version you can use for it

Type your comment> @acidbat said:

Type your comment> @fr0ster said:

Does way to connect from Linux to Reel2 exist?
I don’t have winbox at now.

Sure does mate :slight_smile:
Kali has even a powershell version you can use for it

You need install gss-ntlmssp and use Authentication Negotiate for connection

Rooted Reel2! What a huge challenge! If you need a nudge, just DM me.

All I have been able to do is read the flag. it’s all that is possible thru that “obvious” route anyway, if anyone of yous has gotten a root shell I’d love to hear about it (as in please provide a hint on how to get it). The usual 2cents:
User: fuzz thoroughly, brute force, then leak a hash - with something also used to abuse name resolution
Root (flag): stay where you are, the key is there

Anyone else having an issue with the shell crashing?

Finally rooted the machine.
This box is definitely the most difficult box I have done so far(also it was a windows box which made it more difficult for me)

User: Enumerate all the ports that you find. Get in, meet everyone there and then try to create a suitable name for them. One of the user is giving up too much info. Get inside the other side. Go for fishing. get it and crack it.
Powershell for linux does exist

Root: Wherever you land, read the files they will definitely give something.
encodings are important. Getting shell is not always the way.

Thanks @xaif7aLe for helping me get through this box and @FelisLeo for the help with initial foothold and user

PM if you need any help

User flag is broken