User was torturous and fun at the same time. Learned a lot on the way. Baby steps with a lot of enumeration and constantly combining information that you found previously. Every step felt like a victory.
That one exploit was some black magic indeed! Unfortunately I had some trouble reading the credits I found, and stupidly overlooked a simple fix. Thanks to @clubby789 for giving me a nudge!
Root was really easy once I got on the right path, but very fun and satisfying. Unfortunately somebody had rewritten an important file, so it took me some extra time to get on the right track.
Great box @MrR3boot - thank you for the adventure!
I must admit, really hard but interesting machine for me, learnt numerous things with this one. SO REALISTIC !!!
Initial Foothold: Dont get fooled by the forbidden gates, take out directories, try getting all the subdomains, etc. Then go ahead and look sources to find something weird.
User: Make a note of what files were mentioned during your initial enum and which of them you were not able to access, or maybe shown some errors.
Root: Standard linux priv esc technique, 007 out running processes, detect the interesting ones and exploit…
Hi,
I have been able to comeback to the C****d d** repository and got a “double” hash. No luck with easy dictonary attack. Knowing that brute force is not needed for this machine I’m wondering if I’m chasing a rabbit.
Should I try to crack the hash or I’m lost again?
Thanks,
Victor
Hello guys! 've been making first steps in pen craft. Could somebody please make some things out clear for me in PM, have several questions, would appreciate it much. Thanks in advance =-)
I sadly ran out of steam last night without realizing I already had permissions for both root methods (RIP points), but I still wanted to pop in and say I really enjoyed this box.
Being able to discover things slightly out of order, figuring out how/when each discovery mattered, and finding slightly varied solutions to some of the steps (upload, dev, root) made the journey feel a lot more organic than it would have otherwise.