Official Previse Discussion

Official discussion thread for Previse. Please do not post any spoilers or big hints.

Hello everyone! This is my first box for the platform, I hope you enjoy it!

Already loving it! Quick question and it may be a stupid one but I checked out your blog which I assume is your professional one and not in scope or part of the previse site?

Type your comment> @sechvn said:

Already loving it! Quick question and it may be a stupid one but I checked out your blog which I assume is your professional one and not in scope or part of the previse site?

You’re correct, that is a blog where I’ve posted some personal projects. Completely unrelated to the box :smile:

Ok thank you. By the way awesome notes added it to my sites that greatly help! Love the honeypot and intel stuff!

Is the way playing with request to some files and try to create something? I got only one username and the name of a backup file. Any advice please?

Type your comment> @hum4N3rd said:

Is the way playing with request to some files and try to create something? I got only one username and the name of a backup file. Any advice please?

I’m right there for at leas 1h…
If someone can tell us something new!!!

probably a noob question, but this is my first Release Arena machine. I connected to the Release Arena VPN and then spawned the instance, but this machine doesn’t ping. I don’t see a forum thread related to the release arena topic.

Type your comment> @maurelio said:

Type your comment> @hum4N3rd said:

Is the way playing with request to some files and try to create something? I got only one username and the name of a backup file. Any advice please?

I’m right there for at leas 1h…
If someone can tell us something new!!!

There might be a way to interact with the page :smile:

Nice Box, Rooted

Type your comment> @lerusse1312 said:

Type your comment> @maurelio said:

Type your comment> @hum4N3rd said:

Is the way playing with request to some files and try to create something? I got only one username and the name of a backup file. Any advice please?

I’m right there for at leas 1h…
If someone can tell us something new!!!

There might be a way to interact with the page :smile:

trying with the f*** parameter on d******* page but nothing

got hold of www-data but stuck cant get to user… any help?..
just shooting my shot lol

edit: … I thought there was an error in the hash lol …

Got root! Nice machine. Web part was for me the hardest. User and root are pretty easy!

Rooted! Super fun machine!

This is a great machine. I think the way to foothold is the most difficult part. Getting to user was pretty simple if you don’t overthin it. The path to root is a good reminder that sometimes it’s the simple things. Hopefully these hints help out anyone who is having issues.
Foothold: I burped my way through some history and found that my browser was slacking on what it was showing me. There are a few ways around this, personally I like to host. After that, reading will lead you to where you want to be.
User: If you did your reading, you know the path to go. No matter how weird the path may seem, stick to the basics.
Root: Sometimes you have to make your own path to where you want to go.

I know these are kind of cryptic, but if you don’t overthink it, you will be fine. If you need help, feel free to DM me.

Type your comment> @maurelio said:

Type your comment> @lerusse1312 said:

Type your comment> @maurelio said:

Type your comment> @hum4N3rd said:

Is the way playing with request to some files and try to create something? I got only one username and the name of a backup file. Any advice please?

I’m right there for at leas 1h…
If someone can tell us something new!!!

There might be a way to interact with the page :smile:

trying with the f*** parameter on d******* page but nothing

You will continue to get nothing there. Read through the files and find something EASIER.

.

@icthus1 said:
probably a noob question, but this is my first Release Arena machine. I connected to the Release Arena VPN and then spawned the instance, but this machine doesn’t ping. I don’t see a forum thread related to the release arena topic.

same problem bro!

im stuck and i dont know if im in the right way.
i found a******.**p is creating a low priv user is part of the CTF itself?

Hello guys, Im completely new to this and this is my first release arena.
I’ve tried some unsuccessful brute-forcing and reading some previous comments it seems that I was way off haha lol

Ive played around with the “orange guy” but still no idea what to look for, if anyone can DM me some nugdes/advices to what study/research more about would be really appreciated;