Official discussion thread for WifineticTwo. Please do not post any spoilers or big hints.
Dear HTB, please, disable shared instances until wednesday (while we can play with release arena VPN). Many people just used the information that was left in the box and got root.
1 Like
Got user flag thus far. Feels a bit underwhelming that most of the time I was consumed by solving some technical problems around the box, rather than looking for actual vulnerabilities.
Feel free to reach out for help. Haven’t looked into root yet.
2 Likes
got the user flag. Any update on root ?
Gut user too. No leads for root yet
any hint for root?
I’m stumped on user. Am I on the right track with trying to troubleshoot rce via the C code in the hardware tab or am I missing something?
it’s the good way
1 Like
So user flag is pretty easy to obtain. I suspect that im doing it wrong though. Can someone with user flag DM me so we can chat about how to obtain the user flag correctly? I seem to brick the application each time (can only get a shell once, if it interrupts or I accidentally do ctrl + c, I need to reset)
1 Like
I use the reverse shell from the known exploit. The exploit itself does not work for me.
2 Likes
Yeah keep trying with it. The fix is a little bit stupid.
Is there a workaround that I need to figure out or is the box just broken? Did you get it just with a POC script/unaltered revshell?
not unaltered
nice box.
for user you don’t need the available exploit, you can login into the application, upload and start a program with some malicious code.
for root you need some wi-fi hacking skills…
no man you can check what the explooit is doing and do it manually. I kept on trying for hours, then did it manually and it worked like magic. 
In code, “/” in paths is important
Use pwncat-cs instead nc for a robust and stable shell
is there a problem in makiana right now, the http request is automatically redirecting https
IMHO getting the user flag is pretty simple for a medium box but the real challenge is getting the needed tools on the box to proceed further with the root flag
Yes and then all the resets makes it very hard.