Poison

HTB Content Machines
1

May I ask why the Poison box has this name?

2

coz it’s toxic :wink:

3

anyone able to pm me? I have a couple questions about priv esc

4

Can someone pm me, im stucked on the esc

5

Spoiler Removed - Arrexel

6

Spoiler Removed - Arrexel

7

Spoiler Removed - Arrexel

8

@0xEA31 said:
May I ask why the Poison box has this name?

Another way to get user has to do with it :wink:

9

I’m running into weird issues with JTR. Looks to not like using rockyou as a wordlist, but I’d rather not waste too much time bruteforcing if there’s a list I can use. Anyone else having issues with JTR, or can I PM someone willing to help?

10

Having an issue with privesc. It looks like I successfully extracted the zip but it doesn’t appear to be useful for anything. Is it a distraction, or am I missing something?

I don’t see any other priv esc vectors after searching around the box for a while. Please pm me.

11

Nevermind, got it!

12

Spoiler Removed - Arrexel

13

Spoiler Removed - Arrexel

14

Spoiler Removed - Arrexel

15

@putabones said:
Spoiler Removed - Arrexel

I didn’t get shell :slight_smile: so can’t give hints on Priv esc. Dirbuster or gobuster didn’t show anything. Any other tools provide better results for initiatl steps?

16

I would say take a look at all the ports you have ID’d already, then work your way through the ones you can access. You should be able to see ones that correlate to each other.

17

yeah got it :slight_smile: thanks. Now working on Priv Esc.

18

Spoiler Removed - Arrexel

19

Any hints on the extracted file?
Is it usefull or not?

20

Spoiler Removed - Arrexel