Active any hints

HTB Content Machines
21

Can I PM anyone regarding PrivEsc?

22

@nscur0 said:
User is easy, but not trivial for someone who has no initial knowledge about the exposed services. Root however… probably relatively easy too, I’m convinced it has to do with k*****os but everything I’m finding regarding this service requires code execution on that machine. Derp.

I am stuck at the exact same step and I also have the same view.

23

Got user, tried getting shell with w*****c and p****c but no luck. Still trying to figure out a way to pop a remote shell so I can access what I need to elevate

24

I am having issues with finding a certain ID to use a certain technique to get root.txt. Any tips on that?

25

everyone forget it, they patched ms14_068 does not work anymore link: Login :: Hack The Box :: Penetration Testing Labs

26

If you used MS14-068, you are missing about 99.9% of this machine’s purpose.
So i urge you to give it another shot!
This is supposed to act as a stepping stone for Endgames and Pro Labs with Active Directory.

27

@rek2 said:
everyone forget it, they patched ms14_068 does not work anymore link: Login :: Hack The Box :: Penetration Testing Labs

AH RIP

28

I found some credentials, decode it but I can’t seem to find the place to use them. Could someone give me a nudge?

29

tips on priv escation would be appreciated. Thanks alot

30

@Vex20k said:
I found some credentials, decode it but I can’t seem to find the place to use them. Could someone give me a nudge?

same boat

31

I’m thinking maybe you have to impersonate someone to access root.txt? Or maybe i’m missing something.

32

@Vex20k said:
I found some credentials, decode it but I can’t seem to find the place to use them. Could someone give me a nudge?

PM if you are still stuck

33

If you found the credentials but don’t know where to use them, maybe sit down and think what you’d do if you were a legit user on a Linux workstation in an AD environment and were trying to access shared resources.

34

Any pointers on priv escalation greatly appreciated

35

Spoiler Removed - Arrexel

36

I don’t want to give spoilers, but hopefully a nudge for anyone looking for Priv Esc. Went down the same route as most but saw the announcement about the patch for that vulnerability being deployed. Went back to basics, in the end, all I needed was on the Kali distro already, there are good examples. It’s all about Getting to the Principal of the matter

37

Spoiler Removed - Arrexel

38

@JunGLeJuiCe OK, got root. Typo error with good examples that i’ve already tested…

39

Fun box, I wonder how many people rooted it prior to the patch applied… Got to use some more new tools and learned a little more about active…

40

And this box is meant to be easy… :astonished: