@cool4coder said:
rebootissued from a root-shell doesn’t change user.txt and root.txt.
People shouldn’t be doing this.
If you need new flags you have got to issue a reset from htb’s webinterface.
Really this is the only way boxes should be reset.
Imho htb should communicate the flag-problem in the forum and pin it to the top.
I totally agree.
However, from HTB’s perspective there isn’t a flag problem. Several hundred people submit flags every day, about 10 a week mention it in the forums and I think even less report it to HTB. I dont believe they are aware that it is really a problem. Hopefully, if more people report it, they will review how it works.