Been stuck on getting shell for a while… Found both web apps, logged into one and got nothing. Been running the ■■■■ out of dirbuster/gobuster on directories on the r****s.txt files, but haven’t found anything useful. Can anyone PM to get on the right direction? I Feel like I have missed something…
I got a root after a while. Thanks for help 
@koredump said:
Rooted. The mind works in weird ways… got nothing for privesc all day staring at it, but once I went to bed, I figured it out in minutes. This thing really is a source of tunnel vision.PMs ok. And I did get a root shell, but you don’t need to.
I did get the root.txt, can you pm the hint on the way you get the root shell?
@3mrgnc3 thanks <3 great box!! Rooted it, didn’t think one roots boxes that way very often, but why not if it works.
All the messages combined in this topic constitute for a total spoiler :trollface:
Got root flag. The most anoying root i got!
This is a box that you learn more and more even after you have obtained root.txt.
I’ve validated 3 ways to get priv esc to root, this was very educational!
When I started this box I hated it, but at the same time I enjoyed it because I was learning a lot. Good job to the creators. I finished it today and I think it taught me a lot.
ok so I am severly stuck… can someone assist me… i am trying to get root flag… i know I am like 80 percent of the way thru
@H4ck3d5p4c3 sent you a pm.
Can someone help me with inital access I think im derping out here…
After quite a long battle, I got a root shell. IDK if I consider it “realistic”, but it did teach me a lot. Advise : Have a plan to enumerate if / when automated tools fail and always dedicate some time to open sources and research. Make the effort to duplicate your target in a sandbox environment so you can experiment with different techniques.
@fl337 said:
Can someone help me with inital access I think im derping out here…
Enumerate and don’t trust the output!
Tarnation, this one was tough… finally made it through to the end after taking a few slaps on the wrist for relying on tools! Thanks for the tip @Maniek!
Can someone help me with initial access I think i am lost. Could not upload you know where? spidering and wp not taking me anywhere? If possible PM me. Thanks in advance
guys, help please!! hint is using brute force in right wplace??
I’m stuck for almost 3 days. I enumerated every directory with gobuster. Downloaded m*******.zip open source app, read its files. scanned all ports. Found 2 exploits but none of them works.I’m very stuck. “retartar” I thought it was related somehow to .tar archive files but I don’t know.I even archive php file twise into tar(re-tar-tar) BUT NOTHING WORKS. Very little help will be appreciated. I need just direction.
Could anyone pm me for priv esc, I know about the script and the “differences”, I tried with root flag but doesn’t print it out for me… so close yet so far…
@bonjourpancake said:
Could anyone pm me for priv esc, I know about the script and the “differences”, I tried with root flag but doesn’t print it out for me… so close yet so far…
work smarter, not faster 