Rooted wow what learning curve, cheers to all that nudged you know who you are ?
Jarvis ? Rooted 
Rooted. I think one wouldn’t be able to do that easily if not familiar with Linux things in general. Anyway, interesting machine, thanks a lot!
Could use some help on root. I know the service I am attempting to exploit, but my syntax is f*cked. Been to GTFObins and a few other sites to attempt a troubleshoot.
If someone wouldn’t mind messaging me to have a look at my syntax I would appreciate it.
Thanks
Rooted! PM if you need help
Quite a fun machine. Learned some things, specifically when getting user. Root was pretty straightforward, so much so that I actually didn’t look at the obvious things to look at.
Finally rooted Thanks to @six2dez for correct direction.
Finally rooted this box!
USER: Enumerate every page and every room! Just like in Swagshop, LEARN the tools you’re trying to exploit.
ROOT: Use some tools and enumerate. Google is your friend. Fairly straightforward.
Feel free to PM me for any hints or nudges. I’m happy to help!
rooted thanks to @krypt0s for the hints!
Hi all! First post and everything! i wonder if someone is able to point me in the right direction. I have user and am trying to privesc to root. I know the s*********l issue however i cant figure out how to exploit it. Id appreciate a steer if anyone has a spare minute. much appreciated
Can I get a hint on how to escape the p**g command without using the forbidden characters?
any hint from www-*** to per via s**.py?
Type your comment> @salute101 said:
any hint from www-*** to per via s**.py?
Look at what the script does, all its different options and then look at what it does and how you can manipulate it to get it to do what you want.
I can not for the life of me find out what to do with s******.py not really well versed in python any nudges or just subtle tips would be appreciated
My advice to any one struggling with the PY is there is a guide already listed which will help you. DO NOT speed read it. read it properly and you will understand what you need to do
Type your comment> @trentxsweat said:
I can not for the life of me find out what to do with s******.py not really well versed in python any nudges or just subtle tips would be appreciated
Also struggled a bit, all the necessary tips are already in this thread.
rooted . nc machine though.
got root, thanks all for help.
Have a r****** shell for www-data. Do not have permissions to user.txt.
Have stumbled across s******.py but not sure what i need to do next.
PM me
i am quite stuck on the point of the first priv esc… i get a shell as the user i want but the shell dies after a while… any hints how to make it persistent?
PMs are welcome of course.