Official Agile Discussion

HTB Content Machines
112

need hints for root

113

machine silently patched without changelog?
a secret changed to unknown urandom(32).

1 Like
114

I have a similar issue where I donā€™t know where to start. Iā€™m trying to get directories / pages and subdomains but no luck so far. Can you give me a hint?

115

Do you get the correct domain? noting the redirection.

1 Like
116

What do you mean by redirection/correct domain?
Iā€™m only getting agile.htb as nginx default page and didnā€™t find any other directories/subpages when using a medium dirbuster wordlist.

117

try with ip, or some arbitrary subdomain.
you would encounter 301 when fuzzing vhost/subdomain.

118

Can Anyone help me with the foothold?

119

Can you help me here? I found the LFI but I donā€™t know what to do besides looking into /etc/passwd to find potential usernames.

120

Help with werkzeug console pin exploit , please DM

121

Try to look into the source code, its path is visible in the error logs :heart:

122

@tec already posted up in the comments, but the foothold might have changed (silently, apparently). Iā€™m talking some info you might find yourself trying to extract from a specific file.

UPDATE: Apparently it has been added yesterday.

2 Likes
123

Hey guys, this was a tough one for me. At last, rooted!
DM me if you need help / hints

3 Likes
124

Iā€™m stuck at first user. I tried a lot of things, but Iā€™m not sure how to proceed. Any hint/help would be great. Iā€™ve been at it for a week :confused:

125

Maybe not anymore after the latest patch.

1 Like
126

Hi there! Can anyone PM me and guide me a bit withing this box? Iā€™ve already checked all the paths Iā€™ve found and got stuckā€¦ I have lfi, have appā€™s source code ect. But I see that the app is probably patched and the cookie+idor path canā€™t be used anymore. I also tried to reverse Pin but with no luck. Have a feeling Iā€™m missing something obviousā€¦

3 Likes
127

Iā€™m in the exact same place as @mar11. Can someone give me a nudge on that?

2 Likes
129

Iā€™m trying to see the source code of the application but I canā€™t get the path of the application

130

Can someone tell me if reversing the *** for the c***** is the right track as I donā€™t think IDOR or cookie mods are possible since patch.

131

check errors

132

llevo ya casi una hora e probado todas las rutas que salen en los errores y nada