Type your comment> @HomeSen said:
Got a POC working and can start navigating around the system. With that was able to do research and found a way to circumvent functionality that is disabled. Found a user that shouldn’t have a certain setting enabled but he does. Pulled on that thread but it seems that the directoryy I want to write to and the directory that comes back as part of a query with privs are two different ones. Don’t know if I can pivot any further or if someone dorked the box on purpose. Any guidance?
This is on purpose. I suggest taking a look at @TazWake’s response, here: Official Compromised Discussion - Page 6 — Hack The Box :: Forums
Understood, and thank you for the refresher. I did find that juicy nugget. Was working that avenue but so far hit has been unfruitful. Maybe it’s time to use a bigger hammer against it.
----Edit: found the right hammer, this box is dope so far. Definitely mirrors some real world applications.