Official Zipping Discussion

HTB Content Machines
142

same here

143

Just owned the box. Feel free to PM me if you need a nudge :slight_smile:.

1 Like
144

Hi, is the zip upload technique the right way to deal with the box to get the user shell?

146

Can anyone give me a hint, Iā€™ve tried literally everything!

147

My drone/home/rektsu/.config/ is missing libcounter.so, and stock does not have this call. What should I do?

148

Think about if you could exploit your way with some SHARED thing and build it your own now that you find that something is missingā€¦ :slight_smile:

149

I didnā€™t find my way to RCE through the upload. Iā€™ve tried litterally evrything on the upload part. But nothing worked. The only thing I got is a kind of LFI, I can read the content of files that the user r have the read permissions on! Is the upload thing a rabbit hole? Can I have a little hint??
(I got the user flag, by reading it, i dont think itā€™s the appropriate way!)

1 Like
150

PM me.

153

Finally, finally, rooooooooted!!!
This box was a bit difficult for me, but it was crazy fun!!!
Thanks to the boxā€™s creator and the advice in this thread!!!

image
image701Ɨ549 108 KB

1 Like
154

exactly the same with me

155

Think about what else can U do with the MySQL, also is there any way to connect the first vuln with this

1 Like
156

Hello, i have been trying the intrusion on this machine for 1 week and still donā€™t get it, i would appreciate if someone could help me. Thanks:)

160

i have got the user flag using lfi but couldnt get into the machine any tip regarding that

163

bro tell me how to get reverse shell i tried zip method but didnt work

164

Upload vector is a bust.
Anyone have a directtion or hint we could go in?
Fuzzing yields no results.

165

I found the SQLI but now Iā€™m stuck and canā€™t get a shell. Could someone DM me a hint?

166

any chance of a nudge to the proper sqli. I cant find it for the life of me.

167

im stuck in the same place. tested LFI. sqli, upload vector with zip slip and get nothing

1 Like
169

Sooooā€¦ Am I supposed to bypass the preg_match regex to perform sqli or is that a dead end ? Iā€™ve tried at it for a few days now, no successā€¦ :wink:

170

same here, i got the user flag but i donā€™t know how to get into the system. Iā€™ve tried to bypass preg_match but no solution. PM me if you want to work together.