Official Passage Discussion

HTB Content Machines
#72

Finally rooted. Looking back, the box was quite good. User parts were pretty simple.
But spent a hell lot of time on the root part. Wasted a huge time poking around at the C*** service. Thanks to the hints from the forum, finally found the privesc and it took only minutes to get root -_-

Feel free to PM for nudges if stuck anywhere :wink:

#73

Spoiler Removed

#74

Nice machine with a few twists just to keep you on your toes.

root@passage:~# hostname && id
passage
uid=0(root) gid=0(root) groups=0(root)

Thanks @ChefByzen for the machine ? PM for hints and explain steps taken to date.

#75

added , coma…but still it is in coma…no response !!
reload everything…!
helped to get the payload in list

#76

Rooted ?

Nice box and good practice for people doing OSCP. User is pretty easy and I overthink the root part. Very nice box.

PM for help ?

if you are looking for your first medium box, this is a good one.

#77

Rooted. I think this box should be an easy box in my opinion :smiley:

#78

****@passage:~$ cat user.txt
got user.txt !!! thank you @rholas !!

#79

Rooted ! pm me for any hint but tell me where you are , what you tried :slight_smile:

#80

Yay, my first non-retired box that I rooted.
Thank you for the machine

#81

Finally … rooted
Very clever machine…easy when you know it.

#82

Spoiler Removed

#83

Apparently I explained my mistakes too much, was considering spoiling x)
Rooted as well. PM for nudges

root@passage:~# whoami && id && hostname
root
uid=0(root) gid=0(root) groups=0(root)
passage
#84

rooted!!
after tons of hours digging in the wrong places able to solve this don’t overthink it just keep it simple
I need some hints PM and ill do my best to help
thanks to @gs4l for the boost I needed

#85

Hey! finally rooted it after hours. And mainly by finding a super helpful article by an accident :smiley:

Could anybody pm me pls what the correct approach was (rooting phase)? I mean mainly the hints “Stay at home”, “read a novel”, etc. It did not help me at all. Even after rooting the machine I don’t get these hints

But overall I enjoyed it. Thanks! :slight_smile:

#86

Spoiler Removed

#87

@maurotambo

Brute-forcing isn’t the way. Just read some articles in google about the WebPage.

#88

Rooted . Easy box. PM for help!

#89

in case anyone is stuck where I was: try

sed ‘s/[[:blank:]]*$//’

#90

i am actually really confused for user 2 looked at so much stuff, but no result. Any hints?

#91

Type your comment> @LegendHacker said:

i am actually really confused for user 2 looked at so much stuff, but no result. Any hints?

What is a file that could belong to another user?