Official Precious Discussion

HTB Content Machines
1

Official discussion thread for Precious. Please do not post any spoilers or big hints.

1 Like
2

got reverse shell

3

Any hint?

4

Easiest machine bro try it:)

5

Root flag got within 1.01 -H

7

Any hint for privesc plz

8

:gem: ROOTED :gem:

Nice machine, entertaining and with new things.

Send DM for any questions :hugs:

2 Likes
9

Any hint? Is it OWASP Top 10?

10

for me getting to user was not about a cve
enumeration of files and their contents helped me.
i used an automated tool but i still had to look at the contents of files to get what was needed

12

Which tool did you use

14

Rooted. DM for hints

1 Like
15

Please give me some hints to get a reverse shell

17

Rooted. DM for hints.

User: There are two vulns to get a reverse shell.

Root: Check your rights and what you can do.

1 Like
18

Some hints here:

For user:

  • Check the pdf properties.

  • Inside, search for hidden things.

For root:

  • You can create an evil file to read.
3 Likes
19

please help i’m stuck on the convert to pdf

20

Look at what converts the website to pdf.

21

enumerate harder. Look at everything. Google everything too

23

Any nudges available? So far have gained access to a revshell (usr R___y) but unsure as to how to upgrade shell and gain access to usr (H___y).

Yours in spending too many hrs on Google trying to figure it out,

24

Hi, i just got access as an unprivileged user, can anybody give me a hit about how can I achieve as the user who has access to the flag?

25

Any hint for convert URL to page? I keep trying but always get error message " Cannot load remote URL!"

edit:Solved,thanks for help! Use burpsuite…same payload in firefox give me error,but in burpsuite give me a pdf.