Official Administrator Discussion

HTB Content Machines
1

Official discussion thread for Administrator. Please do not post any spoilers or big hints.

1 Like
2

Hi everybody,

any hints after initial foothold? I’m wondering about the possible lateral movement.

Good luck! :wink:

3

If you need help DM me :smiley:

4 Likes
5

Thank you very much :wink: I’ll try harder for a while and if I’ll stuck - I’ll DM you.
Currently I’m wondering if AV is blocking me or it is only my brain. :wink:

Good job with the box! Congrats!

1 Like
6

please i need help

7

where

8

for lateral mouvement

9

Fun box! PWNED it! DM me for help, always happy to help :smiley:

10

Already got michael, but cant find a way to move to the other user. Can sombody give me a hint, pls?

11

Could use a push in the right direction. I have a user list, tried a few things not really sure what to do from here.

12

Any hints for the initial access?

13

I’ve got both flags and neither work. I’ve changed VIP VPN servers 3 times with the same result. I’ve also reset it several times. I’ve got screenshots of my work too to prove I got them. Something is seriously broken.

14

Use bloodhound with the user provided

15

What did you do so far?

16
17

Dm me please

18
  • Enumerated ports
  • Check anonymous login on FTP
  • Check smb
  • Check if ldap allows enumeration without creds
  • Brute RIDs
  • Check RPC endpoints
  • Check some usernames with kerbrute (only found one)
20

HTB provided a user and a password, at this point you already notice there is a AD. SO you can use bloodhound to go through. you can use bloodhound-python to it

2 Likes
21

Im dumb sorry I didn’t noticed that LOL

22

I just started the machine and didn’t noticed that HTB provides creds xdd

2 Likes