Official discussion thread for Ophiuchi. Please do not post any spoilers or big hints.
I can get a connection back to my box, but something isn’t working correctly for me. lol
edit: got a foothold, but looks like I was beaten to it
First time playing with this so trying to get RCE is gonna be fun
Got RCE, but can’t spawn revshell ![]()
Finally, got root
Like this machine !!
Learned new things really!!
Now, that was fun. Pretty straight-forward machine without any guesswork or surprises. Yet still I learned something new. Thanks for that, @felamos ![]()
@HomeSen I have user.txt any hint on root
@GARYHAK2009 said:
@HomeSen I have user.txt any hint on root
Look what you are allowed to do. And then find and exploit it ![]()
cant get the ■■■■ thing to execute code
Type your comment> @p00dl3 said:
cant get the ■■■■ thing to execute code
the same thing is happening to me
root@ophiuchi:~# id
uid=0(root) gid=0(root) groups=0(root)
finally got reverse shell
Got root. Loved the machine, learned new things.
Type your comment> @Gr4yKT said:
Type your comment> @p00dl3 said:
cant get the ■■■■ thing to execute code
the same thing is happening to me
yeah, this was confusing.
For root, all it takes is modification of 1 thing.
Interesting box.
root@ophiuchi:~# id
uid=0(root) gid=0(root) groups=0(root)
Type your comment> @Gr4yKT said:
Type your comment> @p00dl3 said:
cant get the ■■■■ thing to execute code
the same thing is happening to me
Same. ![]()
Loved this box. One of the first of this difficulty that I’ve rooted without any hints whatsoever.
Foothold: probably gonna want to use a web proxy like B*** - try to break the thing. Some careful google-fu can yield some interesting info and some great tutorials.
User: a bit trivial. The name is a big giveaway.
Root: This took me a while to figure out. Usual enum, then once you found a thing, where you are is important. You may have to get your hands dirty with some new stuff.
Thanks for the wonderful box - I think it deserves a much higher quality rating.
EDIT: lots of people are saying to edit the w file - just putting it out that that it is possible to create your own. I got segfaults when using the language you would think to use, but there’s lots of other options out there. A weird version of a commonly mocked scripting language did the trick for me.
Type your comment> @pizzapower said:
I can get a connection back to my box, but something isn’t working correctly for me. lol
edit: got a foothold, but looks like I was beaten to it
i can get a connection back too. but i have no idea on how can i get revershell.
My advice for you guys trying to get foothold… if you get a 500 debug/dump screen… read all the way through it… lol don’t be like me.
Wasted a hour until I noticed that
could have had it soooo much sooner.
Interesting box, rough for my skillsets but tis how we learn so they say ![]()
Type your comment> @PrivacyMonk3y said:
My advice for you guys trying to get foothold… if you get a 500 debug/dump screen… read all the way through it… lol don’t be like me.
Wasted a hour until I noticed that
could have had it soooo much sooner.
Interesting box, rough for my skillsets but tis how we learn so they say
your wasted hour saved me … thanks for the tip.
Rooted!
For the last step. You can use a web thing, and it’s as simple as you think it is, just cut out all of the other ■■■■, and use whatever old faithful tool you’ve used since the 70s.