Official Vintage Discussion

HTB Content Machines
1

Official discussion thread for Vintage. Please do not post any spoilers or big hints.

2

Anybody get a STATUS_NOT_SUPPORTED message?

3

Yep… also the provided credentials don’t seem to work… can’t get anything back from the normal tools

4

I’ve gone through a lot of old school scripts and techniques thinking “vintage” and there might be an outdated vector. So far nothing

5

DM me… made some progress… but it might be a spoiler

6

see this it helps me

7

Yo someone can help me for the foothold i have some content but i am stuck for the user thanks

8

trying to figure out no luck yet

9

I know that I cannot use the regular auth and know which one to use but the evil tool will not connect. Other tools work for enumeration that way…

10

Used just about every tool to connect with the dogs protocol but to no avail… seriously stuck!

11

hella hard

12

Any hints on the foothold? I’ve enumerated the usual services - SMB, RPC, LDAP etc. Ran Bloodhound to see any potential paths. Found a few interesting items but unsure on the path to gain the intial foothold.

13

Got a hash for the s**_*** account but doesn’t appear to be crackable, any other routes that I should explore?

14

That account hash should be crackable!
Try other tools, sometimes hashcat doesn’t like new line feeds :smiley:

1 Like
16

how to use these credentials in Bloodhound, SMB, RPC. i only could use them using LDAP

19

yo the hash take some time to crack ?

22

Any hints for priv esc? Got the user flag and think I have the path to get root flag, however i’m missing the step inbetween.

30

Nevermind. Finally managed to get root flag. Awesome box!

1 Like
31

Hey I found two hashes of svc accounts but i just cannot crack them, am I going the right way or are they just a rabbithole? hints are appreciated :wink:

32

Hey, anyone with a nudge on initial foothold?