Chatterbox

HTB Content Machines
#41

Priv esc?

#42

@ipatchcables said:
Priv esc?

For this box, you don’t necessarily need to Priv esc.

Read the other comments. Don’t over think this one.

#43

I guess I’m over thinking it then… spent most of the day trying to priv esc after getting a stable shell and user. Back to basics tomorrow.

#44

finally got it, dont kill yourself on priv esc, focus on the file itself

#45

Thanks for the hint, got it… and this is why I love HTB. Hours of researching various way to get to something can be used next time :smiley:

#46

My session keeps getting killed with error message Died from Errno::ECONNRESET before I can do anything. Is that because someone else is on the machine? I tried several payloads already. This one’s the only one that opened a session.

#47

@bianca said:
My session keeps getting killed with error message Died from Errno::ECONNRESET before I can do anything. Is that because someone else is on the machine? I tried several payloads already. This one’s the only one that opened a session.

Happened to me too, google up auto migrating meterpreter sessions. The exploit used will naturally close out the connection unless migrated

#48

I’m having an issue with formation of the payload. How to keep the payload under 730 bytes while avoiding the mentioned characters?

#49

@Kwicster said:

@bianca said:
My session keeps getting killed with error message Died from Errno::ECONNRESET before I can do anything. Is that because someone else is on the machine? I tried several payloads already. This one’s the only one that opened a session.

Happened to me too, google up auto migrating meterpreter sessions. The exploit used will naturally close out the connection unless migrated

Thanks! That did the trick :slight_smile:

#50

This box, is a serious annoying “waste of time”

#51

Finally got the shell to be stable, tried several privesc suggested, no luck. Any hints?

#52

@fatalglitch said:
Finally got the shell to be stable, tried several privesc suggested, no luck. Any hints?

Hmmm… ever wondered if you already had the priv?

#53

Tried to access priv’d file in a few different ways, no luck…

#54

@fatalglitch said:
Tried to access priv’d file in a few different ways, no luck…

pm me

#55

can I pm someone on priv esc? Tried several different things no luck.

#56

@Semtex said:
can I pm someone on priv esc? Tried several different things no luck.

Spoiler Removed - Arrexel

#57

Thank you

#58

It is a bind shell?

#59

i can not get stable shell…tried so many times. i found the port, exploit, and payload but every time i get session died on MSF. and i tried to migrate to other running process and did not work i just get Timeout…any advice plz

ps. i run everything after reset :slight_smile:

#60

Use a more basic shell