I had the K* user exploit working this morning, and now, trying the same thing, using random file names…it’s not. 
i used one debugger online and get correct syntax and placed l****h_ but i didnt get any response
can someone pm me to check my syntax thx
Type your comment> @MrBreadcrumbs said:
Hey yall, looking for a nudge on user. I have seen the hints in the image, I can view everything on the high port and I have seen two candidates for a password. Unfortunately I cant seem to find a username! I see people say it should be near the password but I can’t seem to track it down. A push would be greatly appreciated!
encode the “username” . and the try find the encode string to get the username
Rooted!
USER: was fun. I’ve never done that kind of ctf scenario before with clues and puzzles. I felt like I was in the original batman. using the installable tool for processing that kind of db was a big help.
ROOT: What a faff. waiting on the reverse shell was like waiting on Father Christmas. tip: I spent ages getting root because I was putting the cart before the horse. When you’re organizing your attack be sure that when you’re structuring it, you’re not mistaking the structure of the output for the structure of the input. when that penny dropped it was easy.
Also, when I was trying to root some users kept changing my files. If you find a script on the box in a hidden folder that looks like a reverse shell it’s probably another users. I don’t mind people reading or copying my scripts. But don’t alter them when I’m trying to fire them. MAKE YOUR OWN WORKING DIRECTORY
Thank you to those who helped me get unstuck at k***** @PanamaEd117 @knowyourenemy and @TimW94
and thank you @joyDragon for a fun box!
Rooted. Did have problems with things not working as expected all the time.
stucked on root, cant get k****a user, upload shell but it doesnt work, help pls
rooted && , learned new things about banana and g70k
User was not so difficult . Now will see for root.
For user : Just dump and use hint from port 80 
Type your comment> @ixxelles said:
User was not so difficult . Now will see for root.
For user : Just dump and use hint from port 80
i didnt dump anything just one query with the key word and i got the username and password together
Hi everyone,
I liked this machine! User was quite easy, the first part of root was nice but the final stage of root was really painful to me!!
Anyway everything to get user and root was already said in the forum, but if you need help or just a little hint you can PM me!
Rooted.
User hint: the sintax to dump all the db, could be not sufficient to dump the particular info you need…try with a specific query.
Root hint: after pivoting, keep your eyes on the ELK mechanism. You’ll easily notice something interesting, then the whole point will be using the right sintax.
I got the user part but cannot get past this error saying 400 bad message and a**s is a parameter that I need to use when trying to pivot to another user (k****). Kinda new to this stuff fellas, any help is much appreciated
*nevermind, on my way to root
got it, many many thank yous to @cmoon
Finally got root. A bit annoyed on the syntax with the filter… Anyone know why the extra space was needed despite the doc stating that it should be no space?
Feel free to pm for hints for root or user.
ı am trying to getting root. I edit these files g*** filter and in***.c*** and otut.c*** ,but ı am not sure it is working cause I can’t restart the lo**tash service.PM me for hint please
Type your comment> @cmoon said:
Finally got root. A bit annoyed on the syntax with the filter… Anyone know why the extra space was needed despite the doc stating that it should be no space?
Feel free to pm for hints for root or user.
it’s regex \s* mean 0 or more space and \s+ mean 1 or more space
Rooted! PM if you need help
DM for root help please… I can’t spawn shell cause of g**k
rooted, if need help pm me
Type your comment> @cmoon said:
Finally got root. A bit annoyed on the syntax with the filter… Anyone know why the extra space was needed despite the doc stating that it should be no space?
Feel free to pm for hints for root or user.
If you look closely it is lowercase. Not uppercase.
Can anyone give me hints to privesc to user kiba*? Thanks. PM me.