It is only me or this box went from easy to medium overnight?
Yes, Discord was on fire about the easy rating and htb confirmed and changed from Easy to Medium.
Okey, thanks Interesting decision but the points was left for 20 as for easy box from what I can see. But I’m no right person to judge any of this so I’m just happy that I manage to solve this box
Hi all, anybody available to help me get user? I know the exploit and how to execute it but I guess I have been doing something wrong for the past 4 hours. If someone could please DM to help me
Hi all, anybody available to help me get user? I know the exploit and how to execute it but I guess I have been doing something wrong for the past 4 hours. If someone could please DM to help me
■■■■ I’ve been enumerating too for a while now but not really sure what route to go now…S** was a bust.
Hi all, anybody available to help me get user? I know the exploit and how to execute it but I guess I have been doing something wrong for the past 4 hours. If someone could please DM to help me
Got user, tonight I’ll try to root the box.
I was doing everything correctly but a little dumb mistake that blocked me for like 12 hours.
P.S. I’m using lab vpn and not release arena because I can’t spawn the machine there (IP 10.10.10.237)
Edit: rooted!
Foothold/user: start with classical enumeration and focus on ‘less common’ ways, you’ll find useful information that will let you understand what the target offers. With some google-fu you’ll eventually find the right article that will show you how to get into the box
Root: enumerate with classical tools, beware of rabbit holes!
I have what is needed I think and i can get the exploit to work locally I just can’t figure out how to get the files packed back together so that the user runs it on the remote machine.
Edit: I figured it out finally with a bit of help from @SovietBeast . the machine is incredibly vague about what it needs and my syntax was off so it took me a long time of playing with the payload before it finally worked.