Official Precious Discussion

HTB Content Machines
114

Some unsafe characters will break the payload. Try with the browser, or encode it with proper

115

I tried via the precious.htb page (skipped burp) and I tried encoding it but nothing… It’s kind of annoying

116

Just completed my second machine, this one was much easier because I already knew the first steps, and the script I made for Photobomb helped me a lot to enumerate everything in the beggining

I forgot to say in the other post, but I didn’t use Burp, in neither one of the machines

If anyone is desiring to have some help, you surely can send me a message, R is always here :heart:

117

Root is killin’ me.

/usr/lib/ruby/2.7.0/psych.rb:456:in `parse’: (): mapping values are not allowed in this context at line 3 column 7 (Psych::SyntaxError)

1 Like
119

Owned today. I am new to pentesting… but this seems a lot harder than the “Easy” rating. I cant imagine what Medium or Hard will be like.

120

Rooted!
Interesting machine but not as easy if you lack the enumeration patience. Also overcomplicating things does not work.
DM for nudges!

121

thank you for that hint got the creds

1 Like
122

Rooted! Nice easy machine! :grinning:

123

rooted
thanks to @devi4nt for user and @Paradise_R for the articles provided :heart:

2 Likes
124

Rooted :smiley: User flag I think was harder then root flag. I just got stucked cause of repetitive resets :frowning:

125

clean up after yourselves, ya nasties. it takes two seconds to undo what you did to get root…

126

Hey guys,

I got user flag and I’m trying to escalate privileges. I’m pretty sure I know how to do it but when I try running a ruby script I created as sudo I get message “Sorry, user ***** is not allowed to execute /usr/bin/ruby as root on precious.” When I check sudo -l it says I can run ruby as sudo.

Any idea why that might be? Thanks

127

Hello :relaxed:

It is because you can, but only the file that is specified in the path, you need to find an exploit based on this, if you need help with it, you can surely call me :heart:

129

Ahh that makes sense now. I’m going to investigate that and let you know if I need more help.

Thank you!! (:

1 Like
130

Thanks everyone for not throwing in big hints or something. It was quite fun, I didn’t quite understand how to get to root but I knew it’s all about that ruby. Good luck future adventurers !

131

Try something more like you’re searching for files in LFI u know how to get back two dir …/…/etc/passwd
with this knowledge try using the *.js to your advantage

1 Like
132

Need explanation on the steps for this box. Much appreciated. Spoilers alert.

Q1) Why do i fail to download a pdf file when i type in an URL, whereas i manage to get a website for the download using a web server (python3 -m http.server)

Q2) I tried using netcat as a listener “-nc lnvp 5555” but it does not work. Doesnt netcat set itself as a listener or server?

133

Q1: You will need to tell which port you are running, or the server runs at port 8000.
If you want use default http port, you need to tell the python.
That is, “python3 -m http.server 80”

Q2. Netcat is a listener. I think you’ll need"nc -lnvp 5555"

135

Hi folks, I have both flags but when I submit any of them in HTB it says “Incorrect flag” - Machine has been reset and I’ve obtained flags again but they don’t work. Any idea of what’s going on?

137

obtained first pdf by putting really long url like

http://aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa.xz

1 Like