Postman

HTB Content Machines
#110

Type your comment> @garbo77 said:

I got access with rā€¦ user and found the i._ā€¦k file.
I have used ssh2john to move it to hash and john to find the passphraseā€¦I got a match with cā€¦8 but connection get closedā€¦for sure I do something wrong, but what?

Iā€™m exactly in the same pointā€¦

#111

spoiler removed

#112

If you see ā€œconnection get closedā€ then try the password you found elsewhere.

#113

@LoRKa said:

Rooted. The box is quite easy although you can always learn something.
There are too many hints in the forum to solve this.
Something that I have found curious is to see how the author has left all .bash_history with his commands.

Enjoy friends!

:smiley: OOPS! That should of definatly not been left behind! I guess we all make mistakes XD

@thr33per @n4v1n @0X44696F21 Thanks for your kind words! Iā€™m glad you all enjoyed it!

#114

Iā€™have some errors on remote ā€œr***ā€ (for first shell) but not in my local instance is a normal behavior ? .

#115

Rooted. The user was way harder than root.
I got the root in 5 minutes after root ( research included )
If you need some hints feel free to PM me.

Special thanks to @PinkDraconian who helped me in the process :smiley:

#116

need hint for root pls dm me

#117

Type your comment> @ethicalkiller said:

need hint for root pls dm me

Use information from your initial recon, youā€™ll know where to go next.

#118

Iā€™ve got r**s user. I donā€™t know how to use the i_**a.bak file to proceed. Any help would be awesome.

#119

Thanks @TheCyberGeek. Was indeed an easy one. Did go directly to root, with information found in shell via r*.

User: Go through r* to get the key and use the pass.
Root: CVE

#120

can i get the user the same way i got on the box?

EDIT: I should just read the post aboveā€¦

#121

Relatively easy, but made me realize that i still dont have a routine and i fall for rabbitholes. I still think it was entertaining and actually rating is spot on.

#122

@Quacktop Thanks for your kind words though! Could you PM me though I would be interested to know the route you took :slight_smile:

#123

@blaudoom Iā€™m glad you enjoyed it! Sometimes we can all get mislead in some way. Whatā€™s important is you figured out how to get past it! Thanks for your kind feedback!

#124

Was a very fun box

hints for initial:

  • do your basic enum and google for the non standard ports and get articles
  • follow the article to find out what works. then update your exploit and run

hint for user:

  • think about where juicy data can be and search for it

hint for root:

  • go back to start and try other things
  • like @Quacktop said CVE

like always if it spoilers too much please delete

If help is needed PM me

#125

Rooted. Wow I feel dumb, the privesc from foothold to user was glaringly easy but my brain just died. Overall fun box but I feel the root was a bit too easy.

#126

Really fun box :slight_smile: I have a tendency to overthink ā€œeasyā€ boxes which got me stuck a couple of times.

#127

Got user access @M**t

#128

Just rooted this box. Thoroughly enjoyed it, found user to be harder than root thoughā€¦rooted within 5/10 minutes of getting userā€¦ Thanks @TheCyberGeek

#129

very good box! I like it