Fortune

Got user!
For root , will this article be helpful NFS | Penetration Testing Academy ?

Type your comment> @Jazzblaster said:

Anyone that would be willing to PM me a nudge on how to ‘start’ on this one? My regular enumeration attempts don’t really give me anything at all and my google skills seem to be failing me on this one. I can’t seem to figure out how to ‘fix’ or bypass the ssl handshake error and I can’t help but feel i’m missing an important chunk of knowlegde about the problem that’s being presented here. Am mostly looking for some reading material related to the specific problem. Of course, if it turns out i’m focussing on the wrong thing here, that would be nice to know as well :slight_smile:

i am not sure in this …And doesnt know any materials related to this … But what if server needs to authenticate users with a specific criteria … ? …sorry …just ignore if it doesnt maske any sense

Spoiler Removed

Is there a hash cracking using hashcat involved in getting root access ?

I am the the last stage . I understand we to use u*** p****** as the key .But should i crack the $p*******2$ hash ?

Spoiler Removed

Rooted !! Thanks all for the help

No cracking of h***** is needed .No h****** jo** etc is needed …
check the source code .and de**** using the things in the d*

Need a little nudge here on what I am doing wrong. Can someone PM me? Don’t want to spoil anything

Can someone hint me towards initial foothold? Wrote a script to get all the fortunes (got quite alot of them) but didn’t find anything I think I am looking the wrong direction?

Spoiler Removed

Type your comment> @sillydaddy said:

Rooted !! Thanks all for the help

No cracking of h***** is needed .No h****** jo** etc is needed …
check the source code .and de**** using the things in the d*

no need to crack them? I really cant get it wtf this hashes!

rooted!
if you read the code but can’t find the password for decoding, look more into db.

I seem to be the other way around, I cannot seem to find the way to decode, but I have the thing to decode I think. Anyone wanna brain in PM?

Type your comment> @Maglok said:

I seem to be the other way around, I cannot seem to find the way to decode, but I have the thing to decode I think. Anyone wanna brain in PM?

same boat here… this machine has been something cant decode

As someone who has done 12 boxes so far, do you think this box would be too difficult for me?

I am interested because, although I have found RCE (so the OS and some certs etc.) a bit too easily, the box is still ranked as “Insane” difficulty.

Are there any parts that would be considered “too” difficult (compared to boxes like Ethereal or Nightmare)?

Thanks and sorry for not contributing directly to the box.

Type your comment> @KostasKoutr said:

As someone who has done 12 boxes so far, do you think this box would be too difficult for me?

I am interested because, although I have found RCE (so the OS and some certs etc.) a bit too easily, the box is still ranked as “Insane” difficulty.

Are there any parts that would be considered “too” difficult (compared to boxes like Ethereal or Nightmare)?

Thanks and sorry for not contributing directly to the box.

root is a bit hard but with some tips it is actually manageable. The user part is fairly easy in my opinion. The tips in here helped a lot.

Type your comment> @KostasKoutr said:

As someone who has done 12 boxes so far, do you think this box would be too difficult for me?

I am interested because, although I have found RCE (so the OS and some certs etc.) a bit too easily, the box is still ranked as “Insane” difficulty.

Are there any parts that would be considered “too” difficult (compared to boxes like Ethereal or Nightmare)?

Thanks and sorry for not contributing directly to the box.

Rating this box was difficult because there’s such a diversity of skills and experience on HTB. Perhaps it should have been “hard” ? Give it a try regardless. The more you do, the easier they get as you learn.

Great box, user was fun and root was a rabbit hole pain.

root tips: really try to understand the source code not just grep inside

can anyone PM me an hint for root?

Got User after an hour or so, I had to read about new things here and there, but I know in the end of the day I learned new things!

Let’s go for root!

Either I’m looking in different place, or I am missing something. I have some hashes of p***** format, but I can’t find something interesting in that place. Really can’t understand where I’m going wrong for rooting it

EDIT: Rooted! A fun ride indeed. This box does NOT require John/Hashcat. Respect to those who helped me out of this. Really amazing box @AuxSarge