damnc

About

Username
damnc
Joined
Visits
74
Last Active
Roles
Member

Comments

  • Type your comment> @benjamin2000 said: (Quote) It's kind of funny. The filesystem is set as non-exec. So, the script itself is not executable. However, bash is executable and in a filesystem without the non-exec flag. So, even though if you call…
  • Type your comment> @riceman said: (Quote) @riceman do you mind if I PM you? I'd like to take a look at these 6 lines long payload you had. I believe I tried that route for quite a few hours without much success. I am curious for what I was missi…
  • After a very, very, very long journey... done! Foothold: Make sure you read all emails you receive (so, yeah, you need to receive emails ;) ) and once you have a communication method working, you may need to automate it. User: As usual, look aroun…
  • Could we change the name of this thing to "curve ball"? When I think something will work, it does not! Finally had an working exploit for the binary; but when I tried to actually use it, the client refuses it.
  • Type your comment> @damnc said: (Quote) Never mind. It was a wrong assumption throwing me completely out of direction. :tired_face: Now things seem more stable. I can run arbitrary commands using a very primitive shell that works but it takes u…
  • Finally decided to try this machine. Still stuck in foothold, but I guess I have a pretty good idea on where to go. Here's my issue: A service responds to me, but only occasionally. Sometimes it calls back in a few minutes (2-3) sometimes it never …
  • Type your comment> @HcKy said: (Quote) Yeah... this is weird. But I wonder if the reported instability wouldn't be related to the name... if you send in too many people/requests, it "sinks". :wink: (Edited to remove typo. I guess it'…
  • Finally! Personally, I found that getting user was, frankly, quite easy (even in comparison with some easy and medium boxes). Sometimes, we just need to go the wrong way to find the right path. It took me a while to pivot, but it was me going down…
  • Finally, after about 2 days. * Got stuck with foothold. There are some great hints here that helped me, in particular, the importance of RTFM, which can help you flag a way in. * User was pretty straight forward. Nothing to add here that wasn't m…
  • Interesting box, user is rather easy, and most hints here are on the ball, so I have nothing new to share. I don't have anything to share about the first PE, other than it took me down memory lane. I actually have seen that in a real life engagemen…
  • Rooted! User: Maybe it was because I had worked on a certain laboratory, but this one seemed easier than the other. I even restarted the machine to make sure I wasn't leveraging someone else's solution. Root: I had a good idea about my escape plan…
  • Type your comment> @gebl said: (Quote) Yes, I sometimes find the naming for the machines quite funny.
    in Quick Comment by damnc August 2020
  • I do not want to repeat the advice of "get permission first"... But make sure that it's not a verbal agreement, get permission on writing. I once had a boss asking me to do some digging on another machine from the company and I said "…
Avatar

Howdy, Stranger!

Click here to create an account.