Official Pilgrimage Discussion

HTB Content Machines
170

I am not being able to decode the db, any tips?

171

Someone please help me find the credentials. I am lost

172

exploit for root not working i tested it manually

173

can someone DM

174

I found m****k and now im gooogling exploit. Am i on the right way?

1 Like
175

I used CyberChef to decode it

1 Like
176

i have found the vulnerability, but not ablt to dump some data that can lead to the initial foothold, can anyone help??

177

check the source code ull find it

178

please help my poc exploit not working for root. i used everything online

179

I found the user but I donā€™t know the password. What should I do? help me

180

rooted! did not know the gitdumper thing, but from there it was pretty easy and straightforward :slight_smile: i think every hint on that thread is enough for everyone to solve this box. for every exploit you need to execute on that box, there is a publicly available poc, that you really donā€™t need to change. it works out of the box.

181

did u check source codes for pass?

182

thanks bro, already rooted

186

I can read the pass file and know the user. But I do not know to do next?

I try to find ssh file for the user but fails.

Any hints? thx.

188

rooted. but Iā€™m still wondering why this machine is called Pilgrimageā€¦ just because go ā€œagainā€ā€¦?

189

rooted .

191

Am I missing something with the login credentials for SSH? I have the username and password but canā€™t login.

192

me too

194

what u have is name:pass take just the pass

1 Like
195

Hello everyone,
I feel like Iā€™ve been banging my head against the a wall (or should I say walking into one) on root.
For some reason I canā€™t get the exploit just right to trigger the RCE.
Any help would be appreciated!