Official Download Discussion

HTB Content Machines
23

Trying to crack the cookie signature, but does not seem to work.

24

Yeah no idea where to even start with this one. Like an instant dead end.

25

first blood ■■■

3 Likes
26

I tried all the tools that i could think of, plus manual enumeration and i do not have any idea anymore what to try xD

1 Like
27

it’s funny to think that can be a plot twist: The machine don’t have any vuln and we are baited

7 Likes
28

that would actually be hilarious if they did that some time ■■■■

29

i found 2 vulnerabilities so far

30

oh my joshSH… :skull:

31

Is this really medium difficulty? :sweat_smile:

1 Like
32

I have an “LFI” that allows to read only read files from the web. So far enumerating the App.js and other paths.

1 Like
33

13 hours and still no system own. Oh HTB and their arbitrary difficulty ratings :sweat_smile:

34

it’s only been 9 hours

36

Weird, let this box open overnight and my files are still not deleted…

38

Did you found already something?

1 Like
40

There’s something with the private / non-private I guess
or there’s something with the download_signature…idk how to proceed :face_with_spiral_eyes:

41

This is a pure guessing box? 0 clues what so ever

1 Like
43

So no one has rooted this yet???

44

someone get user

45

I think there is LFI in file upload (Private) right?

46

well interesting. only one player rooted it now!