Bart

HTB Content Machines
41

@hexer22 said:
what is and how to use hackthebox.eu

What do you mean?

42

I don’t know how to use it , say I am a noob

43

need help to start

44

@hexer22 : if you don’t know how to use it, it’s probably not for you !

45

I have managed to get a low-priv shell.
used an automated tool to enumerate but did not find anything that can help on priv esc.
is automated tools the way to find the vuln (meaning should i try other tools until i get something?)
or is there a manual thingy to find

46

@w31rd0 said:
I have managed to get a low-priv shell.
used an automated tool to enumerate but did not find anything that can help on priv esc.
is automated tools the way to find the vuln (meaning should i try other tools until i get something?)
or is there a manual thingy to find

I’m close to get user flag, but this host is the worst experience in HTB so far.

47

@macw141 said:

@w31rd0 said:
I have managed to get a low-priv shell.
used an automated tool to enumerate but did not find anything that can help on priv esc.
is automated tools the way to find the vuln (meaning should i try other tools until i get something?)
or is there a manual thingy to find

I’m close to get user flag, but this host is the worst experience in HTB so far.

has been smooth up to the part you get the first shell.
now the headache begun

48

Any Hits for this box would be appreciated, made some progress, but any more would be nice

49

You know one thing that really gets me is when people change passwords on servers that multiple people work on. It makes us all do more resets. I spent two hours on bart, because of this thinking I must be missing something. did a reset and bamn six steps further. Be kind rewind :slight_smile:

50

Hi, I got the username for the monitor server login, cant seem to find the password. Can you body help? is it a rabit hole? if so please help me get back to the right direction

51

hi, I have the creds and i see another chat application. the same creds don’t work to enter thhe chat. i do not see a file upload functionality or anything with which can get me a shell. ive tried sqlmap on the profile section- no result .any slight nudge would be great.

52

@minhhungvn said:
Hi, I got the username for the monitor server login, cant seem to find the password. Can you body help? is it a rabit hole? if so please help me get back to the right direction

pass is in the thing you found :wink: …

53

I’m stuck at the same place @aneesh , bruteforcing hasn’t helped so far. Perhaps it can be found/guessed

54

I think it is so stupid having to guess username and password like this. Very “realistic”

55

I got shell…
I searched reg****
I found cred to monitor for da***l
I look to every php file…
Tried some exploits…

I have no idea what do next…

Any hints

56

Would appreciate a hint on how to find the login page - have been enumerating for days now… Recently i did a vhost scan and discovered a lot of interesting sites but all 302 redirects to one particular page… Hit me up in a PM, thanks.

57

There are 2 user steps to login. But I can not find the password. Any tips?

58

create your own for chat :slight_smile:

59

Stuck in chat. I can log in. But I do not know after this. I tried Xss attack but no results. Any pm please?

60

Finally got root… had a lot of issues not having a correct/stable shell… Enumeration gave different results based on how my shell was established…