Magic

HTB Content Machines
21

just got user privs

22

Finally a normal box…

23

@th3y said:
Finally a normal box…

What do you mean ? :slight_smile:

24

Can’t access the file after uploading under i*****/u****** section, can anybody PM me the nudge??

25

Any hints for root?

26

To whomever uploaded that burp request to docker.registry.htb, thx for the laughs :slight_smile:

27

@UrielY how did you upload the file? Everything I try results in “What are you doing there?”

28

Type your comment> @AidynSkullz said:

@UrielY how did you upload the file? Everything I try results in “What are you doing there?”

PM me

29

Spoiler Removed

30

how you bypass login

31

Just rooted the machine.
All in all an okay machine! :slight_smile:

32

Spoiler Removed

33

Just got root…
Thanks to @sh0wa for helping me out of my rabbit hole…

I made root harder that it had to be…

34

Pretty basic, but learned a trick I didn’t think worked at the end. Nice box.

35

Rooted thanks to a nudge, thanks @sh0wa !
Root was quite hard to spot. Requires some proper enum and knowledge of (basic) vulns! :slight_smile:

36

rooted and learned alot

37

any nudges on initial foothold. I think some nasty h***** are the way to bypass login, but nothing I tried works. Am I going down a rabbit hole?

38

have user looking for root, not finding much could use a nudge :slight_smile:

39

struggling to actually login on the page, any help would be appreciated :)))))

40

root was hard to spot, but easy to exploit :3
fun box

EDIT: i recommend using that one big expensive commercial tool instead of the cool open source one for root