Traverxec

Hello friends good morning could you give me a hand I have the shell and the user also has the hash but for some reason john does not work well for me or it is I who did not master it well at all

Sorry for my english i from spain.

pm me

Type your comment> @extincted said:

Rooted.
This was an interesting machine, got tricked one time and spent alot of time somewhere i shouldnt. The way to root was also interesting.

Pm me if you need help.

help me bro xd

Hi! i would need help. I dont know how to use GTFOBins with this special command to get root priv

Please send me a PM to give me a hint

Type your comment> @bumika said:

My most memorable privilege escalation so far. :slight_smile: Thank you, @jkr.

Ok, it depends on which ā€œsizeā€ you would like to use. :slight_smile:

Woa ā– ā– ā– ā–  I spend last night so much time on this boxā€¦

Foot: simple curl request
User: well yea, that took me some time. Find all the stuff you need, read the files next to it and the man page of the serviceā€¦its written dozen times hereā€¦ I read the stuff dozen times but finally, in the night I got it lol xD (hint; not everything that is accessible is also visible)
root: well yeaā€¦took me again ages, I tried so many thingsā€¦ at the end my only tipp isā€¦ size matters

Thanks to @0x1MF40 who guided me a bit out of the last brainfuck xD

Type your comment> @0xbadbac0n said:

Woa ā– ā– ā– ā–  I spend last night so much time on this boxā€¦

Foot: simple curl request
User: well yea, that took me some time. Find all the stuff you need, read the files next to it and the man page of the serviceā€¦its written dozen times hereā€¦ I read the stuff dozen times but finally, in the night I got it lol xD (hint; not everything that is accessible is also visible)
root: well yeaā€¦took me again ages, I tried so many thingsā€¦ at the end my only tipp isā€¦ size matters

Thanks to @0x1MF40 who guided me a bit out of the last brainfuck xD

I have the user and the supposed hash with the password but when deciphering it tells me that it is not md5 if you could help me thank you very much

Can pls someone help me with priv esc and GTFO? I only get non esc shell.

Rooted !!!
Really a fun box, with fine tricks. Really a learning house for beginners. The hints provided in the forum are enough to get yourself root.

But if you still need any help or want to understand why a particular thing worked, donā€™t refrain from DM :wink:

Can someone help me with user? Iā€™m really stuck there, I found a hash, but canā€™t crack it with hashcat, found something id_rsa related, read the c**f file, read the manual of the service. But even now, I canā€™t figure out, what to do with itā€¦

Type your comment> @lblg said:

Type your comment> @tony201 said:

I was able to get in to the user but now Iā€™m stuck. I keep seeing everyone say that its right in front of my face but I donā€™t get it. I mean I have something in mind such as modifying the **.sh and making it run my client that I set up with MSFVenom which didnā€™t work of course, but im not sure if thatā€™s exactly what i need to be doing. Can anyone PM and give me a tip for root

Iā€™m looking and just starring at the **.sh file looking at all the commands and trying to modify different things and Iā€™m just not getting it. I am not sure if I can write down all that I have tried here but yea thatā€™s pretty much where I am at right now.

Donā€™t try to modify the script, but look what it does. Thereā€™s a hint that you can execute something. Think what happens when you execute that command and what you can do from there. PM me if you need hints.

Wooow I was doing the right thing the whole time, but I just didnt know you could type while in that area. Thank you
Got Root!! first box.

hi guys , iā€™m trying to open the site of this box , but i keep getting 403 - Forbidden
any help or anyone get the same ? ?

Solid machine. User may have been a bit much for some new guys, but overall, I thought everything was decently well thought out. Nothing was too difficult.

Foothold: CVE
User: Enumerate. The creds arenā€™t uselessā€¦ Config files can also be useful. There are multiple ways to get user.
Root: Look through a smaller window, and youā€™ll see less.

Edit: If you message me for help, I will not respond unless you provide additional details regarding where/why you are stuck and what you have tried ā€“ thanks.

after several attempts finally got suddenly root. Fascinating.

Rooted, more or less !
It is a hint :slight_smile:

Rooted!
Feel free to PM for hints <3

Nice box, especially the user part which is a good opportunity to learn properly unix fs permissions. Hint for user from me: some things are not visible, but the crucial ones actually are. I spent too much time to look for files in their default places. Do not repeat my mistakes.
Nice machine. Enjoyed!

Iā€™m definitely going to have to come back through and read through all of these pages. I was able to get a shell and traverse some of the directories. But was unable to get user or root flags, little long get the hashed passwords from anywhere. Linux/Unix is not my strongest of knowledge but Iā€™m still learning. This machine is fun and infuriating all at the sametime for me. However I feel once I get it I will learn a lot more about it

Rooted!

Root took me an infuriatingly long time, I have never seen anything like that beforeā€¦ The more you know!