uid=0(root) gid=0(root) groups=0(root) [email protected] #
Overall a very very beginner friendly box - which I think is why the ratings are the way they are. Could the foothold have been more difficult? For sure.
I got a little lost in bad…
Got user.txt as the a****, and have a pretty clear idea of privesc, but am getting a weird error on a certain package. Not really familiar with the technology but I think I know what to do with d*****.sh.
Would really appreciate some nudges on root!
Keep it simple, read your scan output. You'll find something that helps analyze everything you're seeing initially. Once you find the first big clue use that informati…
[email protected]:~# iduid=0(root) gid=0(root) groups=0(root)[email protected]:~#
Overall a really frustrating box because I hit rabbit holes hard. Finally rooting after the "middle" hop took less than 5 minutes. 5-6 hours of wasted enumer…
uid=0(root) gid=0(root) groups=0(root)
Overall, kinda a "meh" box in my opinion and closer to a medium, especially given the limitations in getting the initial foothold (if you got a revshell you'll understand what I mean).
The tips in this thread are more than enough to pop a shell and privesc, although I will admit the initial foothold is a little annoying and makes you think in a "different" way than most boxes.
Feel free to P.M. for a nudge :)
All in all not a huge fan of this one since the initial "lead" is hard to come by. Huge shoutout to @SuperVish for some help getting me out of rabbit holes.
If you can find the T****** you are on the right track, and as @Elleu…