Official Sau Discussion

rooted!
jeez getting that shell was something

finally rooted and i’m honestly kicking myself for how long until the penny dropped for root :rofl:

feel free to drop me a dm if you need any hints

Same, I am playing with it tonight! Hopefully will find a way :smiley:

I’m the smallest step ever away from root but something isn’t clicking can someone dm me, who is happy to read over what i’m doing

I’m right there with ya! So close!!

Just got it!! Was so so simple it hurt!

Look at the last point on gtfobins!

can i DM?

Need Wanted. Missing page $200000

i can’t find m*******l login page anywhere. Where did it go?

try to ask the locals, maybe they’ll help you find it

1 Like

can anyone help pls, just stuck on footholding

Owned

First of all, nice easy machine there is no rabbit hole anywhere. The new comers needs to now a bit of networking and how a “proxy works” and studied some web vulnerabilities. Then everything is documented by searching on Google. For “root” just make sure you have a stable shell and read what you can do, there is nothing “trivial” in the exploitation since others binaries have the exact way of privesc if you don’t pay attention to the excessive privileges.

Finally rooted, whoa. I’m a newbie and really learnt alot, again.

Big thanks to @samushi for pointing me at right directions :slight_smile:

no problem! as a noob myself it’s always nice helping others

1 Like

finally got root. Had to upgrade my shell =P

Any hints for code execution? I found the s__f vulnerability but I can’t figure out how to get it to do anything useful. I’ve gotten it to send an empty http request to my machine but that’s it.

1 Like

I don’t know if you figured this out already but keep in mind that there are other services open, and http can be used from another port in some cases.

Just got it! get stucked a long time in reverse shell part, what I did was using burp intruder to send all the revershell payloads and got lucky!!!
PWNNNED!!!

Just rooted!

USER: RTFM, using a random PoC won’t make the trick :wink:
ROOT: Just basic PE enumeration will give u the answer

For any hints just DM me with what are u up to

my shell doesn’t work

Do other commands work? Are you struggling only with shells? If so, what is different than in case of other commands which are working? If found the culprit, how to eliminate it…