Hey guys how did u overcome the usual multiple users change the same thing .Because it is not possible to reset the box and hope it will work .Someone may already changed what u ar trying to achieve ?
It changed back automatically.
@SanderZ31 i pm you ā¦
Type your comment
Rooted!!!
Pay attention to all the details to obtain users and passwords.
Root is more direct. VS2019 works well.
Very good box.
@Rocketeer said:
I truly think that this box is absolutely useless for people that donāt have a windows box for the compiling part, literally wasted the whole day trying to figure out how to do it on linux, but still wasnāt able to do anythingā¦Completely useless machineā¦
I disagree. Not a useless machine at all. Learned quite a bit along the way. Coming from developing on Linux almost exclusively before now, I tried for a bit to get it to work on Linux too. But the experience of learning how to build some thing with VS was very meaningful. Hopefully this method will come in handy again!
Also, Azure (at least had) a generous trial offer goingā¦
Probably a way to get it done for free in there somewhere.
Love this box, thank you again @egre55!!!
Type your comment> @algernope said:
@Rocketeer said:
I truly think that this box is absolutely useless for people that donāt have a windows box for the compiling part, literally wasted the whole day trying to figure out how to do it on linux, but still wasnāt able to do anythingā¦Completely useless machineā¦I disagree. Not a useless machine at all. Learned quite a bit along the way. Coming from developing on Linux almost exclusively before now, I tried for a bit to get it to work on Linux too. But the experience of learning how to build some thing with VS was very meaningful. Hopefully this method will come in handy again!
Also, Azure (at least had) a generous trial offer goingā¦
https://azure.microsoft.com/en-us/freeUsing Visual Studio on an Azure Virtual Machine | Microsoft Learn
Probably a way to get it done for free in there somewhere.
Love this box, thank you again @egre55!!!
Okay, but what will you say to people that donāt have a windows machine or simply donāt have the required space?
@Rocketeer said:
Type your comment> @algernope said:@Rocketeer said:
I truly think that this box is absolutely useless for people that donāt have a windows box for the compiling part, literally wasted the whole day trying to figure out how to do it on linux, but still wasnāt able to do anythingā¦Completely useless machineā¦I disagree. Not a useless machine at all. Learned quite a bit along the way. Coming from developing on Linux almost exclusively before now, I tried for a bit to get it to work on Linux too. But the experience of learning how to build some thing with VS was very meaningful. Hopefully this method will come in handy again!
Also, Azure (at least had) a generous trial offer goingā¦
https://azure.microsoft.com/en-us/freeUsing Visual Studio on an Azure Virtual Machine | Microsoft Learn
Probably a way to get it done for free in there somewhere.
Love this box, thank you again @egre55!!!
Okay, but what will you say to people that donāt have a windows machine or simply donāt have the required space?
Azure is āin the cloudā, thereās a ($200) free trial right here to be had⦠and instructions on how.
I genuinely have no idea where these usernames or creds are and Iāve enumerated this box every different way I know how, including automated tools that throw a dozen different methods at it.
I am totally lost. I could use a nudge in the right direction if anyone would be so kind. Iāve spent days on this and appear to be no closer.
Itās a great challenge, I dig it⦠but now I am just spinning my wheels without traction.
-=UPDATE=-
Got my enumeration right. Thanks Bato! Respect given.
(Sometimes itās just right under my nose, just needed the smallest of a push to get it right. I am pretty sure I can get user soon!).
I am in a similar place, enumerating a lot but not finding the creds. A nudge would be appreciated.
if anyone is around and can send me a push on what to do after figuring out connecting i would appreciate it
Edit: got what i was looking for thanks all
Got the user, canāt submit the password hash. Itās been six hours still displaying the same error : wrong hash!!! Can anybody help?:neutral:
@godsky said:
Got the user, canāt submit the password hash. Itās been six hours still displaying the same error : wrong hash!!! Can anybody help?:neutral:
Did you try resetting the machine? Did you get a different hash, then? If not, reset the machine, watch the Soutbox to make sure that no one interrupted the reset, and then wait a few minutes, before reading the `user.txt, again. Should it still show the same hash, try switching VPN regions.
But most importantly, contact HTBās support via their JIRA: Jira Service Management
Have user. Issues progressing from there. I can see a t*** dir and r*****.t** file which is a hint, and understand there may be a s*******. Would appreciate a nudge
Rooted! ^^
My tips:
- Initial Foothold:
I didnāt particularly like this step very much. Anywayā¦
Perhaps that famous wordlist will not work here. Try to be creative =). Also, pay attention on those failed/success status. Did you notice anything different? Investigate how to take advantage.
- User:
Did you notice a different stuff$ in that service? Enumerate!
- Root:
I really loved it. Basic enumeration will tell you something unusual. Search on Google how to exploit it. It is pretty straightforward.
Spoiler? Feel free to delete it =D
IMHO, this box didnāt get the fair rating, it should have got the rating āhardā. For me it was harder than Blackfield because it was a straight forward machine. But, Fuse is NOT.
I believe, if the machine requires a custom exploit or some lines of coding, that should consider as āhard machineā. Thank you @egre55 for the great fun filled ride .
Type your comment> @MorpheusDark said:
I genuinely have no idea where these usernames or creds are and Iāve enumerated this box every different way I know how, including automated tools that throw a dozen different methods at it.
I am totally lost. I could use a nudge in the right direction if anyone would be so kind. Iāve spent days on this and appear to be no closer.
Itās a great challenge, I dig it⦠but now I am just spinning my wheels without traction.
-=UPDATE=-
Got my enumeration right. Thanks Bato! Respect given.
(Sometimes itās just right under my nose, just needed the smallest of a push to get it right).
Thanks to you. Many times what we need is a simple push
Can anyone give me a nudge to find creds? Iāve been trying to find passwords for the usernames for days but havenāt gotten anywhere.
Update:
I learnt something new today, big thanks to @SanderZ31 for the help!
this is really a difficult machine to get root⦠i compiled two cpps to exe and could not produce any result⦠i hope someone would give me some helpā¦
Funny Box, the user necessary to acces the machine seemed to me very curious, iāve never imagined a pr***** could do that. Nice Machine @egre55