Jarvis

root@jarvis:~# id; wc -c root.txt
id; wc -c root.txt
uid=0(root) gid=0(root) groups=0(root)
33 root.txt

Cool machine! :slight_smile:
Fim de jogo.

Trying get www-* shell from other ways. Until now I can confirm two different ways to get it.

Rooted. www-* to root was fun. The path to root was interesting with a lot of learning potential for linux sysadmin control features.

There are plenty of hints in this thread to get you through. Once you get your shell itā€™s straightforward.

Okay, still working through user. I am having a syntax error. I am using a certain web attack on a room. I can write files to /v**/w**/h***. But when viewing the new file, it shows me the column numbers with my code in the column I used.

I can get a shell with a popular tool, but there are limits to that shell.

User down. Bad syntax on my part. No creds needed. On to rootā€¦

Rooted at last.

I spawned one shell from another shell from another shell from another shell from anotherā€¦

Tip for root: copy your public key into authorized_hosts and just ssh in. I was unable to modify the system administration stuff from my reverse shell. I sshā€™d in properly, and the same exact steps worked perfectly.

Edit: Before I logged off the box I saw someone message me on the wall about how I got a particular file into the /tmp folder. Use your kaliā€™s apache server, host whatever files youā€™d like to be able to transfer on there, and then use wget from your shell on the box.

Finally rooted. Great Thanks to @WhiteVoid especially and some others that help me along the way.

One shell leads to another leads to another leads toā€¦root.txt
Nice and straightforward box which aside from that one s*******l breadcrumb at the end is quite a life-life setup.

Thanks @manulqwerty and @Ghostpp7 for this one!

Feel free to PM if youā€™re stuck and looking for a nudge in the right direction.

Iā€™m super lost with the hint about the roomsā€¦ a PM nudge in the right direction would be greatly appreciated.

Sooo back at root. I am in as w**-d***, full tty using python pty. I was working at a certain script owned by p***** that according to s*** I could run. But a few dozen tries with different input/output configurations nothing came up. All led to permission denied or temporary failure in name resolution. Figured I might be in a rabbit hole.

Then I started privilege esc enum again and noticed a certain binary that could be run by another user. Thats where I am stuck, trying to either move to the certain user, or leverage the binary to do what I need it to. Would appreciate a nudge.

Thanks!

Great box, loved it !

User:
enumeration doesnā€™t always mean dirb
If youā€™re being blocked change thingsā€¦
Know your tools, man is your friendā€¦so is Google!!!
donā€™t over complicate, keep it simple and when stuck, back to this thread, all the clues are here

Root:
Enumeration, find something that looks unusual, googleā€¦google some more, read the thread again.

Hey guys, I am trying to hack jarvis but it seems im totally stuck after the enumā€¦ found the p********n page and im totally lost nowā€¦ I think itā€™s vuln to LFI but not sure as some exploits didnā€™t workā€¦ any useful nudge where to look? Im new into this :frowning:

Type your comment> @idomino said:

Iā€™m super lost with the hint about the roomsā€¦ a PM nudge in the right direction would be greatly appreciated.

THANK YOU for those who PM-d me :slight_smile: Got the user, now onto the root :slight_smile:

Type your comment> @mava said:

Can someone help me a bit?
I got the shell as pr via sr but no wanā€™t echo any output.
If i type ls, it just shows ls but not the folders.
But I still can use cd, i just have no output for the commands.
Maybe I did something wrong with the privEsc command.
Little Help would be nice.
Thanks :slight_smile:

Just exit after giving your commands. Will see the output

can someone help me out with jarvis.i got user flag but having trouble with getting access to root flag.how do i start with finding root flag

Man im so stuck on s*******.*y, i got it run as the user, but i stumped on escaping the character blacklist. Iā€™ve read the forum posts, but havent been able to find a proper hint for this one, other that to google it, which didnt yield any results

any idea why i get banned all the time? I donā€™t bruteforce -.-

Type your comment> @FailWhale said:

Man im so stuck on s*******.*y, i got it run as the user, but i stumped on escaping the character blacklist. Iā€™ve read the forum posts, but havent been able to find a proper hint for this one, other that to google it, which didnt yield any results

same here

Type your comment> @n1h4x said:

Type your comment> @FailWhale said:

Man im so stuck on s*******.*y, i got it run as the user, but i stumped on escaping the character blacklist. Iā€™ve read the forum posts, but havent been able to find a proper hint for this one, other that to google it, which didnt yield any results

same here

Maybe you donā€™t need to escapeā€¦go back through this entire thread, thereā€™s a big clue

Got it now :slight_smile: thanks for the help @ixxelles