Enumerate the version… look for exploits…git gud
im stuck in d****r, any hint to gain access to root?
a lot of enumeration in d****r but finally i pwn trickster
I’m stuck on it too since yesterday
May I ask for any hint what am I missing so far?
Even if I’m receiving a root user from notification (not the one with root.txt) I still can not move forward. Caps? Or is it a d*ck** bug to exploit?
Thanks
Ok got it. Case was to investigate files from Brasil 
Thanks for all the hints and good luck!
I am stuck with the priv esc. i am in the container as the root user but i can not find a way to escape it.
You are close to it. Sudo with L and linpeas will help you to move forward.
Good luck!
The private key where I found, doesn’t work for adam (maybe will there stands “api_private_key”). And also all other possible hashes (secret.txt from zip-file and the secret in parameters.php) are not crackable. Also with the database-credentials for adam doesn’t works… Do I overlooking something? Thanks for any hints
bro whree are u stucked?
To find the credentials for adam. Read my last written message…
i have done this machine a month ago i think they are in .br file
yes, that is clear. But where in this .br files? The private key where I have found doesn’t work for adam in ssh login. And the other credentials where i have found in the .br file were credentials for the DB for adam (where by the way also don’t go ERROR 1698 (28000): Access denied for user 'adam'@'localhost'). How can I login as adam, via SSH?
there are more .br file in backups folder check them
Yes, try the creds for SSH.
I’ve already tried that with the found private key in a backuped .br file ssh -i path/to/id_rsa adam@trickster.htb, without success… Is the command wrong?
extremely confusing, using a password stored as a database password for ssh login, instead of the private key which was also discovered…
I escalated my privileges and now in docker. I decompresed all br files. How to find password? May be any filters? Help me please
unzip the two zip files in Backups folder and inside there decompress the .br files. There you will find a file with creds inside
am I really supposed to use all the rockyou.txt to crack the hash? what the heck, my pc is dyin