Official Cap Discussion

got user.txt … any hints for root ?

@hydr8 said:
Ok, this tooked me yersterday longer as expected. Foothold was roundbaout 1 hour and then i wasted almost 3 hours as nathan looking for some PE :cold_sweat:
But finally found it, never faced this PE before but learned a lot about it.

How to get root permissions

Got Root !

User : Get an idea about what are the services which are opened, use web application to build up the insight what is the purpose of the application, then connect opened ports and the purpose of web application to find what are the possibilities to get some interesting information.

OR —

enumerate the application to find something which will open the door to go further.

Root : Think about what are the ways that we can do privilege escalation, try all possibilities and you will end up in something that you can use to get root, beware of some other little rabbit holes that present in the machine.

DM for nudges !
:slight_smile:

1 Like

I can’t join just error eccurd > @koushik777 said:

as usual … an error occured -_- cant access the machine

try to change to us servers

Type your comment> @thegeeko said:

I can’t join just error eccurd > @koushik777 said:

as usual … an error occured -_- cant access the machine

try to change to us servers

I had the same problem (from Europe) and switching to USA helped. But only for like 10 minutes, after that I got disconnected and now I have trouble spawning this machine in both US and EU.

Am I the only one?

Type your comment> @Erno1978 said:

Type your comment> @thegeeko said:

I can’t join just error eccurd > @koushik777 said:

as usual … an error occured -_- cant access the machine

try to change to us servers

I had the same problem (from Europe) and switching to USA helped. But only for like 10 minutes, after that I got disconnected and now I have trouble spawning this machine in both US and EU.

Am I the only one?

Nope same for me. I’ve tried changing to US servers but that didn’t work either.

@Erno1978 said:
Type your comment> @thegeeko said:

I can’t join just error eccurd > @koushik777 said:

as usual … an error occured -_- cant access the machine

try to change to us servers

I had the same problem (from Europe) and switching to USA helped. But only for like 10 minutes, after that I got disconnected and now I have trouble spawning this machine in both US and EU.

Am I the only one?

same i cant access the machine now it says “cant spawn the machine”

I can’t spawn the Machine

Type your comment> @As4t0sh said:

I can’t spawn the Machine

haan bhai

Yeah, down =(

Spoiler Removed

Type your comment> @koushik777 said:

im new to hacking , i though of trying this box , cant do … but when u guys said this the the easiest box in htb … i feel like im not fit for hacking… :disappointed:

I was you a couple of months ago…really I was…I really recommend you to go through the hackthebox academy. It teaches you form zero to hero lol.

Type your comment> @kavigihan said:

Rooted!! Actually, this is too easy to be a hackthebox machine tho. Anyways…

User:
Remember 1 is not the first number you have.
Lazy people use only one password.

Root:
what are SUIDs??
Python is a lifesaver

This is everything you need to know to root this box… Hope thse might help you…DM me for any help… Thanks @InfoSecJack

hey do you get any issue with s*t**p command? or is there any other way

Just rooted thanks to kavigihan’s hint on user. I realised how dumb i was :frowning:
For the root part: It highly depends on your “ability”

Edit: Feel free to pm me!

This is an easy box for beginners. After it gets retired, would suggest to shift to starting point.

Why do people complain when easy machines are easy? I don’t get it.
Anyway, rooted, feel free to DM me.

1 Like

Yay! Rooted! Got stuck at user at first! But the privesc was more straightforward! Lots of rabbit holes here, tho…so if you struggling, don’t forget thats an easy machine. Nothing really complicated. Like literally super basic stuff in the end. When you see it you immediately know it.

@koushik777 said:

im new to hacking , i though of trying this box , cant do … but when u guys said this the the easiest box in htb … i feel like im not fit for hacking… :disappointed:

@akhileshadz said:

im also feeling like that

Dont let it get to you. Boxes are easy when you know how to exploit them. All the people saying “this is easy” really mean is that they found it easy.

If you are new, no box is easy. If you know how what a box involves, no box is easy.

In HTB the “easy-medium-hard-insane” is supposed to be related to how much custom exploitation is needed. For example, you should be able to complete an easy box with existing tools and minimal configuration. However, an insane box nearly always needs customised attacks. It doesn’t always work like this though…

(note - I haven’t looked at this box yet, I cant offer hints or help)

My second box. First one was “Knife”, which I’ve done pretty easily with a little help from the forum here.

Now on this (cap) I got user own finally after some hours. A few more hours in and I can’t make root happen. I’ve tried LinPEAS.sh even, but I also looked at the SUID services, looked up some of them in GTFObins (all but the “snap” ones. I’m not sure if “snap” will get me to the right path, and since I don’t know anything about “snap” I didn’t look further for now).

I’m giving up right now because for some reason, every 30 sec or so, the server seems to be down for some minutes, coming back up for some seconds and going down again … Makes it too hard currently to continue.

just rooted …tq all for ur hints … and some for supporting and motivating noobs like me @CrimsonFlea @TazWake @kavigihan