Official Compiled Discussion

HTB Content Machines
33

I feel incredibly stupid. Read through what I was doing last night carefully and apparently I needed sleep, made a stupid mistake. UGH. Finally got foothold only wasted about 3 hrs.

35

anyone who rooted the box can give any hint on privesc? already got user flag

41

Anyone rooted this yet with linux?

42

Hey there! :blush:

Iā€™m having a bit of trouble getting that initial foothold. I feel like Iā€™m doing well and getting close, but itā€™s been hours and I havenā€™t made much progress. :thinking:

Could someone DM me to help me a bit? Iā€™d really appreciate it! :pray:

Thank you, and happy hacking! :computer::sparkles:

43

can I get a slight hint on root? is the attack vector related to visual studio/building projects?

44

Can someone DM me, have an idea of what to do for foothold but doesnā€™t seem to be working. Guessing that iā€™m missing something crucial.

45

Yeah Im very lost, I dont know where to find this CVE im supposed to use apparently.

46

stuck on user. Canā€™t find any vectors for root honestly. Hashes seem uncrackable, well except one

1 Like
47

Can someone dm me on the foothold. I am stuck on this for quite a while now :cry:
I found the CVE but canā€™t seem to get it to work.

48

Question for foothold: Do I need to create a docker to push to the repo?

49

You do not, can be pushed locally from your attack box cli

50

Got foothold but canā€™t find these hashed everyone is talking about. Can someone nudge me where to look. I suck when it comes to windows :upside_down_face:

51

Seems like impossible without access to windows build machine. If we are talking about hte same CVE

53

Finally got a foothold but not user! Learned a whole of git in the process!!

54

You can ask chatgpt to convert that format for you to the destination one you can use in hashcat examples, or just 2 cyberchef recipesā€¦
If you correctly identify the source and destination formats, using cyberchef would be easier.
PM if more info needed.

56
57

The hash is crackable. You can DM me if you still need help wiht this.

61

this is the way to go

62
63

finally, learned a ton from this box, my hint for root is that if you are sure it should be working and it just isnā€™t, it is probably your shell. wasted hours and it was my stupid shell.