Official Investigation Discussion

HTB Content Machines
42

@JSquared / @riboyster - happy to help; you both have DMs

43

Can someone give a little nudge for user? I think itā€™s about the mime.xml file
but I have nothingā€¦

1 Like
44

Of course :heart:

I sent you a message related to this topic :relaxed:

45

There is no need to read all of them, it is possible to search only for those valuable :relaxed:

1 Like
46

Rooted! Pretty good box overall but did need a hint on root priv esc due to some confusion. Anyone who used ghidra willing to reach out and chat about it?

Nevermind, figured out what I misunderstood.

Feel free to reach out for hints!

47

Loved the rooting part, the user part was kinda annoying though

48

Very nice box. No so interesting in the beginning, but so good in the finding part

49

Rooted! :dragon_face:

Escalation had my eyes hurting, so I walked away for a whileā€¦ then when I returned I quickly sorted things out. That was hilarious. :smiley:

50

Hi! Iā€™ven been able to get the reverse shell, and i think i know what i have to do, but i cant open the log file properly to see the content. I donā€™t know if thatā€™s what i have to do or not, any help?? :smiley:

EDIT: got the user already

51

LOL I got stucked for like 2 because the Upload function wasnā€™t working. I was getting no response from that and If the file had .php in the name, the server never respond. I tought that was a rubbit hole and there was something hiding to discoverā€¦ :frowning:

Now I came back and upload is workingā€¦look like I wasted a lot of time while instead I should have reset the machine :frowning:

52

Rooted. Using GHIDRA I got tricked from a wrong ā€œcodeā€ interpretation, then I used a site called ā€œDecompiler Explorerā€ and that worked better.

Medium machine for sure :slight_smile:

53

First time to encounter reverse engineering content in the box, fortunately not too difficult :stuck_out_tongue_winking_eye:

54

I have grabbed the binary, looked at it and determined the arguments. One is c*** . I am not sure how to leverage this, though. Any tips?

55

Owned! Itā€™s a good medium machine.
Foothold: google fu
User: Analyze This!
Root: Dragon will help you
Feel free to write to DM for hints, I will be glad to help! Just donā€™t forget to hit me a respect :slight_smile:
Hack The Box

56

same here. small hint is appreciated

57

check your first argument again. this solved it for me

1 Like
58

Finally got root. User was pretty simple and straight forward, but root took me forever!

What helped me was the hint from @jondan28. Releasing the dragon was more confusing than anything else, but thatā€™s probably because I have zero experience in it. What helped me a lot was strace. Honestly, I still donā€™t know why it works, I will have to go through it another day. :smiley:

1 Like
59

I loved that box ! First initial foothold is easy but satisfying, then the part where you do some ā€œinvestigationā€ is really great, think that part like it is forensic and look for mistakes when a user authenticate, the hacktricks page on Windows Event evtx will be helpful enough to find the right event :wink:
For the root part, itā€™s reverse engineering, I know that itā€™s a tricky part for most us (and also for me) but the dragon will reveal the readable instructions of that mysterious binary ;p
Itā€™s a simple C code, it has arguments like every code but why ?
If you are really stuck, DM me :slight_smile:
This box really worth it

61

The skidz defaced the site :laughing: :laughing: :laughing: