Chatterbox

HTB Content Machines
1

No ports opened ? :frowning:
tried too much .nmap is dead

2

I tried to think about this machine, but I don’t have idea to how I gain access … sad…

3

Keep at it with the scans. Nearly all ports are filtered, which makes nmap extremely slow. But some ports are open, you’ll just take a while to find them.

4

@berninator said:
Keep at it with the scans. Nearly all ports are filtered, which makes nmap extremely slow. But some ports are open, you’ll just take a while to find them.

Thanks, man… I see the ports hahah… more hints?

5

i cant find any :frowning: wasted 3 hours with nmap :smiley: hehe

6

i got the ports, just no idea what to do with them yet, dont try hitting the whole range at once

7

@estihex said:
i cant find any :frowning: wasted 3 hours with nmap :smiley: hehe

Don’t scan all ports at once. Do a basic scan with port ranges. If you find open ports go for them with other options.

8

@druckk4mm3r like 1-1000, 1000-2000 ?

9

@estihex yep :wink:

10

that box is boring.

11

Boring boring

12

Scan witn netcat ftw

13

i can not bufferoverflow in chatterbox. can u hint me. what do i need? i found exploit but not work…

14

if someone could pm me to talk about the initial exploit that would be great.

15

@kimbilirkim said:
i can not bufferoverflow in chatterbox. can u hint me. what do i need? i found exploit but not work…

I think this has something to do with the OS version. I also found it, but noticed that the exploit works up to an irrelevant version.

16

can someone tell me the prots … its taking too long i wasted 3 hours before and 2 hours today i dont know what the thing in wrong.

17

you cant get a shell if someone is already using a shell…you can wait 3 days for nothing…or cheat with somone to run your powershell line there. in any case that box sucks.

18

F

19

@peek said:
you cant get a shell if someone is already using a shell…you can wait 3 days for nothing…or cheat with somone to run your powershell line there. in any case that box sucks.

Hey there,

So you’re saying that if we found the ports and attempted exploiting it properly but failed, it’s because of the environment? How did people get that reverse shell then? They were just lucky?

20

yep, do a reset then exploit…