applepyguy

About

Username
applepyguy
Joined
Visits
539
Last Active
Roles
Member

Comments

  • @JWindy92 your command above was incorrect format. see @thesithlord 's above. quotes are very important.
  • Finally rooted this beast! I enjoyed the journey of the development of a python client, java source code analysis, and root... holy cow, what an interesting one. Thanks @qtc!
    in Fatty Comment by applepyguy May 14
  • Type your comment> @sloth1985 said: (Quote) Read the java code for the client and create your own Python solution if you dont like Java. That's what I did :) EDIT: Successfully got my python client working and got User! What a fun challenge s…
    in Fatty Comment by applepyguy May 7
  • Got user last night. Working on going from first on-box user to another, but have exhausted all my normal options. Anyone available for a PM to talk things through? Update: Rooted! I sincerely enjoyed this box. It was a crazy challenge, learne…
    in Multimaster Comment by applepyguy May 1
  • Can someone PM me and explain what I'm supposed to get out of the 'special' file on the webserver? i bruted for hours and finally found something that seems like the "you were definitely meant to find this", but I'm stumped with interpret…
    in Patents Comment by applepyguy April 30
  • I was able to use J*-G** to open the file, then save all the sources out to a zipfile, open the zip, make mods, remove all things associated with checksums, re-archive as a zipfile/jar, and use java -jar newzip.jar Maybe that will help you @BingoBa…
    in Fatty Comment by applepyguy April 30
  • Type your comment> @hasky said: (Quote) you need to go deeper and find files/directories on the host you're searching for.
  • Type your comment> @EvilT0r13 said: (Quote) if by refresh battle, you mean by lastest site, then using ssh tunnels helped for me
    in Quick Comment by applepyguy April 28
  • Finally rooted! What a ride, although user2 -> root was surprising, initial access and pivot was a test! PM with what you've tried, where you are, and what you think needs to happen before giving nuggets
    in Quick Comment by applepyguy April 28
  • Type your comment> @MalwareEater said: (Quote) no, pure brute force is against the HTB rules for machine creation/submission
    in Quick Comment by applepyguy April 27
  • finally got user last night, working to create an RCE script today so I can get back quickly. ready to tackle the user privesc and then onto root! PM with what you tried up t if you're stuck.
    in Quick Comment by applepyguy April 27
  • Type your comment> @c2m1 said: (Quote) I sorta did, if you want to PM I can explain
  • Type your comment> @fr0ster said: (Quote) sounds like your uploaded filename has the wrong file extension, or none. i.e. image.png
    in Magic Comment by applepyguy April 21
  • Might help some others -- My foothold did not work until I wrote a script to automate it. I know this IS NOT REQUIRED and this is not the case for everyone, but if you feel you've found how to get initial RCE and are trying without success, automat…
    in Magic Comment by applepyguy April 21
  • rooted and w00ted. HMU for nudges.
    in Magic Comment by applepyguy April 21
  • Rooted! what a great ride... thanks for the challenge and the learning opportunities! PM for nudges.
  • Got user! On to root now, and this c****o is killing me... thought i found a flaw, but can't figure it out. @shack, if you are searching for a specific word, it might not be just a file or folder on 80... what else could it be?
  • Finally got initial access — how Painful!!! Annoying all that work and still no user.txt 😅 pushing onward!
  • Type your comment> @applepyguy said: (Quote) w00t, root dance!
    in Sauna Comment by applepyguy April 10
  • Really enjoyed this box.. tests your code auditing/understanding and was able to flex some dev muscles. Root complete! PM for nuggets.
    in Obscurity Comment by applepyguy April 8
  • User complete, on my way to root!
    in Sauna Comment by applepyguy April 8
  • Root done. very straightforward box. thanks for the challenge!
    in Traceback Comment by applepyguy April 8
  • Root finally done. Had to research and learn new techniques for root -- learned some new things! PM for nuggets
    in Monteverde Comment by applepyguy April 8
  • Besides the annoying and slow connection for beginning, this was a good one. Root complete!
    in Remote Comment by applepyguy April 8
  • Learned a lot from this one. PM for nuggets.
    in Nest Comment by applepyguy April 8
  • Root complete. thanks for a fun box!
    in Resolute Comment by applepyguy April 8
  • Really enjoyed this box. Root complete!
    in Cascade Comment by applepyguy April 8
  • Root complete! Fairly simple box, don't overthink.
    in Traverxec Comment by applepyguy April 8
  • This box required me to research and learn some new topics. Root done!
    in Mango Comment by applepyguy April 8
Avatar

Howdy, Stranger!

Click here to create an account.