Inception

HTB Content Machines
42

@ploami said:

@puerkito66 said:

@zelsonm1 said:
@puerkito66 you are on the right track. You are just the missing the correct way to access the service running on this directory

Also tried over the proxy, but same happended, i think is not the intended way, or maybe i’m doing it wrong :confused:

I’m facing the same problem. Have you figured it out?

Nevermind, got it.

43

Hello, I need a hint… Am I suppose to find the creds for the “hidden” service in a config file? I have some creds from a non-hidden service but these do not work for the second one. I have one user to log in, but I think bruteforce in this scenario will take eons.

44

@MrGill said:
Hello, I need a hint… Am I suppose to find the creds for the “hidden” service in a config file? I have some creds from a non-hidden service but these do not work for the second one. I have one user to log in, but I think bruteforce in this scenario will take eons.

Nevermind, read more about “configs” you find.

45

One of anyone else’s favorite machines so far?

46

This box seems to be quite difficult. I have found a way to access two different services that require a login and I have been able to read files from the server. Yet, I haven’t been able to execute code and I haven’t been able to find any credentials either of the services. Found some useless credentials, which I assume won’t be needed for anything. I wrote a small Python script to try out the “obvious” user/pass combinations, but didn’t get anywhere.

I don’t quite understand how reading more about “configs” will help me :anguished: Perhaps I’m missing something crucial.

47

Finally found the “credentials”. I actually wrote a small Python script to find it, but I suck at this enumeration thing apparently. Now the rest should be relatively straightforward I hope.

48

Errare humanum est! It wasn’t straightforward! Well, I know what to do during the night as I have some “leads”. It seems I must go deeper!

I really like this machine, though it’s certainly not easy to crack. (At least not easy with my limited skills.) Please don’t retire this machine :+1:

49

I’m root, but the root flag is … wtf. :dizzy:

50

I found creds, by following the path stated on one config file and as far as I see it is encrypted. John is not helping me to crack it, any clues?

51

I think the creds should be easy to crack. Did you make a mistake somewhere?

52

I have the same problem here, I found credentials but I cant seem to be able to crack them with John. As far as I can tell I did not make mistake and I am trying to access a specific directory. Any clues? :frowning:

53

Hi. Read through all posts and confused. so found a way to read some files from box after doing something. can see also 2 ports open, one which would be usual way in but creds I have found from usual file cannot be right, only two users? saw other comments saying no creds needed so off down rabbit hole I went! it would make sense if usual file had user info and I could find creds for user to do usual thing for first foothold. Sorry sounds like jibberish, but those who have done will know.
Am I supposed to find creds using the method I am using or find another exploit to initiate a shell? anyone want to PM and I can explain what I have done so far.

54

so with a little more experimenting I see my files are being truncated. using this method of reading files isn’t working. please PM me - I need help (yep in more ways than one).

55

@adyd said:
so with a little more experimenting I see my files are being truncated. using this method of reading files isn’t working. please PM me - I need help (yep in more ways than one).

same here, stuck with that :confused:

56

ah. I can read all the file.

57

anyone offer any help finding that directory which prompts for creds, please PM me.

58

Well I found the creds so I might be able to help you,
BUT I can’t crack them with john so they are useless to me :frowning:

59

Any hints on how to catch the train?

60

@Greenou said:
Well I found the creds so I might be able to help you,
BUT I can’t crack them with john so they are useless to me :frowning:

you can crack it with your friend jhon, just must know wich type of hash is

61

ok know I have asked for help before. I am no newbee. got root , wtf am I do do with the file? nothing makes sense? please help!! PM me please,.