Chatterbox

HTB Content Machines
#50

This box, is a serious annoying “waste of time”

#51

Finally got the shell to be stable, tried several privesc suggested, no luck. Any hints?

#52

@fatalglitch said:
Finally got the shell to be stable, tried several privesc suggested, no luck. Any hints?

Hmmm… ever wondered if you already had the priv?

#53

Tried to access priv’d file in a few different ways, no luck…

#54

@fatalglitch said:
Tried to access priv’d file in a few different ways, no luck…

pm me

#55

can I pm someone on priv esc? Tried several different things no luck.

#56

@Semtex said:
can I pm someone on priv esc? Tried several different things no luck.

Spoiler Removed - Arrexel

#57

Thank you

#58

It is a bind shell?

#59

i can not get stable shell…tried so many times. i found the port, exploit, and payload but every time i get session died on MSF. and i tried to migrate to other running process and did not work i just get Timeout…any advice plz

ps. i run everything after reset :slight_smile:

#60

Use a more basic shell

#61

@unashamedgeek said:
Use a more basic shell

also using metasploit??

#62

I wouldn’t use metasploit exploits.

#63

i tried the python exploit and simple payload,bt i am still stuck strangely :frowning:

what shall i do please. this seems easy box as many have pawned it.

#64

only issue im finding with this box is a stable shell, i know the service that needs to be exploited. I get meterpreter very rarely and usually last about 5 seconds

#65

@jayt1990 said:
only issue im finding with this box is a stable shell, i know the service that needs to be exploited. I get meterpreter very rarely and usually last about 5 seconds

same here

#66

@jayt1990 said:
only issue im finding with this box is a stable shell, i know the service that needs to be exploited. I get meterpreter very rarely and usually last about 5 seconds

Same here! trying to find the basic payload but it’s not working.

#67

@cafeitduong said:

@jayt1990 said:
only issue im finding with this box is a stable shell, i know the service that needs to be exploited. I get meterpreter very rarely and usually last about 5 seconds

Same here! trying to find the basic payload but it’s not working.

PM ME

#68

In terms of privilege escalation, should we obtain a privileged shell, or just get the root.txt hash?

Thanks.

#69

@fkg0qi said:
In terms of privilege escalation, should we obtain a privileged shell, or just get the root.txt hash?

Thanks.

Let’s see. We just have to enter the contents of root.txt. So root.txt content would be enough. But you can spawn a shell for your ego or so :slight_smile: