Friendzone - HackTheBox

Can someone assist me with enumerating that port 53? I already found the text file.

I have found the creds of admin, but they are not working anywhere. ftp, ssh everything I checked

Hi I found something cool! But need someone to whom I can discuss. @gokuKaioKen Can you man?

talk!**

Anyone who can help me with root? :slight_smile:

Type your comment> @Brutef0rce said:

Anyone who can help me with root? :slight_smile:

Ping me I’ll help you

Stuck on haha page with LFI like many others
meh

EDIT: Got it- Was messing with the wrong param like an idiot (the param that displays a pic), instead of the correct param. Someones hint was to pay attention to how the default values in the params really work and then try the LFI (assuming you know where to look with LFI by enumerating the S** port properly).

Type your comment> @Brutef0rce said:

Anyone who can help me with root? :slight_smile:

Try to use pspy (google it) for process monitoring.

Guys enumerated DNS not sure totally correct got the subs and even enumerated for HAHA and other image file.But totally struck on what to do next and how to get creds.Can anyone help me out some more hints on what to do next…

Nice box. Root is pretty obvious, although the “open book” kinda situation feels somewhat CTF-ish.

Hello all ,

I enumarated 53 , found some subdomains but i can not access that subdomains.I tried to change my hosts file but it’s not working.i have limited time for my exam.someone please dm me to shortest way of user.

Thanks a lot

Not very familiar with dns enumeration and whatever I try does yields no resutlts, can someone help me out with the dns enumeration. I tried nmap scripts, nslookup, dig, and dnsrecon and like I said I got nothing out of it. Help appreciated.

I try to access the web application, although I can ping an.frtal.r*d, i can not browse it, nslookup return “Got recursion not available from 10.10.10.123”. Please help me.

hey guys,
I got the user can anyone help me to root.I found the required snake lib but unable to esclate to root

anyone available to pm on this box? would give respect to anyone who help me on this crazy box

Spoiler Removed

Type your comment> @Tdzone said:

I am stuck on https://admin.friendzone*****red Is am right path ?

#Black_hole ?

guys finally I get ssh shell how to prev esc :frowning:

Type your comment> @mpeg said:

Who knew we’d end up missing the clowns?

hahahaha youre coming from FluJab too?? :slight_smile:

Type your comment> @cbx said:

For those struggling with dns enumeration, Bank video from Ippsec helped me a lot.

Now I’m stuck at “Testing some functions !” any clues??

Fucking star… Thats how Nudges should be like… Not these stupid “try harder”