Official MonitorsThree Discussion

I can’t find the root flag. I have access to the backup service, but not seeing root.txt anywhere. Anyone point me in the right direction?

same for me

Never mind, I found it, it’s there just not in the first place you’d think. Folder says it’s empty and that one is.

Shoot me a dm. I can try and help as much as I can. User, no root yet.

finally rooted the box

Same… took some time and hints…

Ugh, got user and was beginning to make some progress in working towards root and the box resets… I am sure it was needed but the reset means going back a few more steps than I expected…

I have confirmed that there are no files in the root directory. So where is the root.txt file? It seems that .ssh is also not present, which suggests there might be another way. Why is it hidden like this? Or should I consider dumping data to obtain the root password and gain direct access?

Can I get a hint on the

Summary

Duplicati backup thing? The files are not restoring to Marcus’ home folder when I back up the /source/root/ folder. I only get zip files that have metadata in them.

1 Like

Didn’t mean to individually reply, but I figured it out. I didn’t recognize what I was looking at inside the zip backup files… :melting_face:

It seems like maybe you didn’t enumerate the system enough.

One hint that should clear things up: check the network interfaces to see if anything looks a little odd. Once you figure that out, maybe go looking for files that are usually associated with that “odd” thing.

Send me a message. I’ll help you

Are you sure you’re looking at /root in host system?

Is user and root supposed to be the same path?

Looking forward to Cacti 4, love the box icon :cactus:

Anyone able to help me with my FFUF command? It keeps hanging and haven’t been able to troubleshoot.

wffuf , dirsearch, ffuf any tool is okay,
your search ffuf VHOST

I found it! But I don’t know why the path is different because of the backup tool logic.

Hello, I’m stuck just after the first login page. I am not seeing any interesting information on the dashboard. Is it a rabbit hole?

Finally got root flag, trying to get to root user now. I made half a dozen stupid mistakes and got lost trying to get 8084 to work after I saw that mentioned. Good box, maybe I just need to take a break.

There’s a ffuf flag to output debug errors to a log file so you can troubleshoot. I think it’s -debug-log /path/to/file. It’s helped me on a number of occasions.