Magic

Spoiler Removed

@madm4n said:

have any article for it ? I just want to figure out

Not sure what the crux of the question is. How did you decide to use that?

The reality is there are a couple of things you could do and this attack is documented in the Mitre ATT&CK framwork.

Got Root, pretty fun box, got me kinda crazy. PM for nudges.
Also, ffs remove your flags after getting them and clean up your mess, you fkn n00bs

rooted finally

Hey Guys, i need some help to priv esc this box! i have already got the user.txt and spent much time to get root without any solid way to investigate. IM LOST !!

Edit: Just rooted ! thanks to @CursedLegend13 ! i can say that i have overthinked and the way was in front of my eyes !

Type your comment> @SkoN said:

Hey Guys, i need some help to priv esc this box! i have already got the user.txt and spent much time to get root without any solid way to investigate. IM LOST !!

observe PsPy while people aren’t spamming Enumeration scripts all over it.

Great box, learned a ton about Linux!

Thanks to @TazWake and @applepyguy for the nudges along the way!

when i am submitting the root.txt. it is saying that the hash is invalid.
plzz help…

a bit of hint to get local user from www-data?!

Type your comment> @myrtle said:

Ah, got www-data. Enum enum enum …

yeah…kindly give me hint to get local user!!
found no relevant services running!

how should i proceed further?

Type your comment> @in3vitab13 said:

Type your comment> @myrtle said:

Ah, got www-data. Enum enum enum …

yeah…kindly give me hint to get local user!!
found no relevant services running!

how should i proceed further?

Assuming you found the m**** creds find out how you can convince it to hand over its data.

i uploaded my file but i am not able to find this any hint?

hints from www-data to another user is to find a creds, then use it in some services to get 2nd cred. :wink:

@amasusoldier said:
i uploaded my file but i am not able to find this any hint?

you can control the machine if your file contain payload :wink:

Need help when i try to upload something the submit button is doing nothing even with normal image is this a bug

I’ve done it when morning became
Thanks @sumlly for finding where I was foolish and @TRX for box :blush:

Type your comment> @abhijasud said:

Need help when i try to upload something the submit button is doing nothing even with normal image is this a bug

it should return some feedback…

Could someone help on root access, I got the user access.
Please PM

> Could someone help on root access, I got the user access.
> Please PM

try strings!! and that wil help you

@CursedLegend13 said:
Got Root, pretty fun box, got me kinda crazy. PM for nudges.
Also, ffs remove your flags after getting them and clean up your mess, you fkn n00bs

i got root too, but my shell is unstale, like it wont show any output but the commands are being executed in the backgroud. i see the output of all the commands once i type exit!
kindly help me get a stable shell