farbs
https://defarbs.com
Detailed writeups of retired machines! 
About
- Username
- farbs
- Joined
- Visits
- 43
- Last Active
- Roles
- Member
Comments
-
This is a 20 point challenge? Am I going insane?
-
Type your comment> @peek said: (Quote) If that's the case then hire away my good sir, I'll be waiting... 😂
-
To those of you who are stumped by this, Googling something like "temple symbol crypto" is enough to get everything you need to complete this challenge. Try harder...
-
Rooted. Nice one @clubby789, although I believe there is an "easy" (and potentially unintended) method for root that should be patched if possible as it sorta ruined that bit for me. I'm going to go back and do it the (what I believe to be…
-
Rooted. I got a root shell, and I used the exact same syntax to obtain it about ~13-14 times over. I reset the box twice. Super unreliable and not sure how to MAKE IT reliable. I didn't change my methods for running anything the entire time. Did the…
-
Type your comment> @rholas said: (Quote) Why do you say that? This hint helped me find what I was looking for!
-
Got user! That was actually a ton of fun. Thank you @rholas and @ALK for improving my Windows knowledge, and also to @TRX for making me feel stupid :D
-
Solid machine. User may have been a bit much for some new guys, but overall, I thought everything was decently well thought out. Nothing was too difficult. Foothold: CVE User: Enumerate. The creds aren't useless... Config files can also be useful. …
-
I am not going to guarantee your performance issues will improve purely based on your current description, as there could be a number of different factors affecting your levels of connectivity. However, as someone who currently has VIP, I believe I …
-
Type your comment> @Shad0wQu35t said: (Quote) Yeah. I, too, saw the vulnerability during initial enum, and it worried me quite a bit for this very reason. Oh well, not the end of the world. Just a bit disappointing.
-
Just started this machine, and promptly stopped lol. WAY too many issues, not even worth my time. I'll come back next week or something.
-
Got around to this yesterday and rooted it. Looked past the first bit for user out of eagerness. Taught me to enumerate harder again. Hints on here are already enough, as previously stated. Good luck everyone!
-
The samba version is clearly vulnerable here. This particular version, samba 3.0.20, is vulnerable to RCE. You could tell that by running searchsploit samba 3.0.20 and getting the resulting exploit. From there, one can obtain the exploit by navigat…
-
So far, I've spent more time setting up a Windows VM just to DO THIS BOX than I have actually working on the box itself. Not sure if this is intended or not, but I spent the last 8 hours trying to figure out how to do it in Linux and it doesn't work…
-
Rooted. Pretty disappointed with this one. Thanks to the creator, regardless.
-
I may be interested. Feel free to PM.
-
Rooted. This one was really solid -- 9/10. I've worked with git in the past, but this was a good refresher. Everything was very obvious when I turned my brain off and stopped delving too deep into it. I normally would give some hints, but I escalat…
-
Type your comment> @clubby789 said: (Quote) No worries. Already got it. Thanks, though!
-
Should I be trying to de-obfuscate? Edit: The answer is yes. Got a shell on the box. Working on user now.
-
Did you reset the box and then root it?
