… and Doctor rooted 
;
I would like to thank you all for the tips, the one worth repeating is enum enum enum.
thanks to @egotisticalSW for the machine.
rooted, foothold was tricky.
for user, linpeas should be enough
for root you’ve got everything you need already
if anyone really need a nudge, pm me with details on where you are specifically in the box
Alrighty, so I have finally rooted and box. It was a really fun box. I wouldn’t really call this a easy box, more like medium. There are enough hints in this forum, so i don’t want give away too much and spoil the box. But if anyone needs a nudge, feel free to DM me.
Hello Guys, i stuck at the login page i search for different information about the server or other flaws like x** or s**i but i found nothing.
Do you have some hints ?
@humangarbage0 said:
Hello Guys, i stuck at the login page i search for different information about the server or other flaws like x** or s**i but i found nothing.
Do you have some hints ?
Look at what you can inject, and then your google searches might be a bit more effective. When you say si, make sure you’ve looked at the right si.
Type your comment> @TazWake said:
@humangarbage0 said:
Hello Guys, i stuck at the login page i search for different information about the server or other flaws like x** or s**i but i found nothing.
Do you have some hints ?Look at what you can inject, and then your google searches might be a bit more effective. When you say si, make sure you’ve looked at the right si.
I think about sli or sti but i’m not sure…
Hi !
I got a certain… string in a file of the server for the user password, am i on the right way ?
Thanks 
@Worty said:
Hi !
I got a certain… string in a file of the server for the user password, am i on the right way ?
Thanks
Probably
EDIT
Turns out, no, it isn’t the right way in this specific case.
Can anyone help me?
I’ve been trying for a couple of days to get past the S***** MG. I know I have to use SI but can’t get any kind of response. I checked for all pars. And I don’t how A*** is useful
Type your comment> @krishnavamsi said:
Can anyone help me?
I’ve been trying for a couple of days to get past the S***** M***G. I know I have to use SI but can’t get any kind of response. And I don’t how A is useful
Keep trying, you are on the right way, sometimes, response are hidden
Finally got root, that was an interesting box !
Dm me if you want hints but there are already a lots of them in the discussion !
Thanks for the box!
Looked into all kinds of files and read through my linpeas output numerous times and still cannot find anything to get user. Can anyone msg me a nudge on what I should be looking for? Strings’ing all different kinds of files has not been fruitful.
@braj said:
Looked into all kinds of files and read through my linpeas output numerous times and still cannot find anything to get user. Can anyone msg me a nudge on what I should be looking for? Strings’ing all different kinds of files has not been fruitful.
Manual enumeration works well here. Grep is helpful. Think about how the application works, what users might do by accident and where that would be captured.
Finally rooted. Many problems with initial foothold. Specially with fucking quotes. super noob. User was quick but I don’t like it much. root also quick with a bit help. Best part the foothold. Thanks for the help given. If anybody require help PM.
Rooted.
I got the foothold two different ways. One being the all things thingy, as expected, and the second one from a certain tag that I have absolutely no idea why it works, but it does, straight to a reverse shell even. Using a few ifs.
Can someone pm me about that second case?
Path to root is straightforward, just google it.
I’m late to this party, but finally rooted. Interesting box to say the least. The thread definitely has everything you’d need for hints. Feel free do DM if you need an extra nudge.
Phew, took me long enough but eventually got root. Shoutout to @Darvidor @caveeroo @limelight @he110w0r1d @exord26 for all their help and nudges.
Plenty of hints already but feel free to reach out if you’re stuck
Found the s*c*u*e m*s*ag*ng platform, made an account… hopefully I’ll be able to make some progress.
EDIT: got hashes… this is getting interesting.