Official Luanne Discussion

HTB Content Machines
81

Type your comment> @DaShan3 said:

Ok so I have come across a page that tells me to use a command to provide some information. But I’m having trouble trying to get the command to work. A nudge by you more experienced folks would be appreciated!

Disregard answered my own question

82

Spoiler Removed

83

Hi Gang - Ive found a lot of things, but nothing that I can think to do get a shell with - Would appreciate some nudges on the foothold if possible - Many Thanks.

84

User was way harder than root, it seems I was still struggling with URL encoding and crafting input payloads to inject parameters. I hate having to load up BURP every time I want to encode a string…
Not a difficult box, but some opportunities to get rabbit-holed !

85

Neat machine.

86

Stuck with forecasting the weather((( Plz give some hints…

87

wow, this and laboratory are kicking my ■■■■!!! any help would be kindly received !

88

Finally rooted,stuck for a long time,some tips:
1.Get a good Dicts,if you don’t use kali linux.
2.Enumerate…and look up information.
3.Watch out any information you can get.
4.”Guess”….,something you got before maybe is useful.

89

Spoiler Removed

90

managed to get root. very interesting box - I learned a lot. foothold was the hardest, mainly figuring out which characters to use to escape the parameter. after that the path was fairly straightforward, although I overcomplicated things with root. thanks @aio for getting me out of the hole.

thanks @polarbearer for a great box.

91

Spoiler Removed

92

@ghostng said:
Type your comment> @balkan said:

any hint? im stucked in /w******/f*******?c***=l***

if you are an english speaker this is a huge spoiler…how the heck did you guess that???

never mind, dangit!

93

Finally rooted :smiley: thanks for the box @polarbearer
If anyone need a hint, DM :slight_smile:

94

Finally rooted the machine, it was a fun box.
Initial foothold:Enumerate properly and try to think how you can close what the computer started and then make it do what you want.
User: What is this guy doing
Root: home dir has the key to his power

Thanks @camk and @trcm for the nudges

PM if you need help

95

can someone give me a nudge on the ‘c’ parameter? I understand the concept, i understand how to theoretically do it, just would like some help with the methodology used to discover it and to achieve the end result. thanks team!

96

Type your comment> @trcm said:

I hate having to load up BURP every time I want to encode a string…
I found curl -G --data-urlencode "param=value" url helpful!

97

@bw00lley thanks, I also discovered a similar (but longer!) curl method :

$ curl -Gso /dev/null -w %{url_effective} --data-urlencode @- “” | sed -E ‘s/…(.*)…/\1/’

But the shortest I found was simply :
$ jq -sRr @uri

98

Fairly enjoyable box - I can see why it was rated easy but there were some gotchas for people.

Pretty much all the good tips are already in the thread. All I can suggest is understand the OS a bit as that really helps. Two steps are very specific to that environment.

99

Pff. Somebody copied root flag to /home/root.txt with 777 perms :lol:
Can’t rm it, still doing user - restarted the machine.
Please be mindful guys.

100

Rooted

uid=0(root) gid=0(wheel) groups=0(wheel),2(kmem),3(sys),4(tty),5(operator),20(staff),31(guest),34(nvmm)

Restarted again to clean it up.
DM if you need a nudge.