Reel

Yay, finally got root on this one as well! It was a very good one, thanks to the creator.

And I’d like to share the hint that made it for me when I was stuck for so long: login-logout might help you

+1 for @rireoubli’s comment. After doing things, I tried to access a particular folder but got access denied. Logged out, logged back in, and then was able to access what I couldn’t before.

Getting to root on this box is surprisingly difficult

I have user access and and xml file which i can import but it does not seem to help. Ran the dog tool but got no answers. I tried to look at tom after import but got access denied. Any help with priv esc appreciated. Open to DM

I’m pretty sure I know what needs to be done to get a user shell but I need nudge. Can someone DM me?

No idea why I can’t get a reverse shell on this. I am using the service to send a specific file format that I generated with a msf module but I can never get a reverse shell…

@meni0n Try using a different method to generate the payload.

Found that blood tool but have no idea what to do with it.

@tigr8787 said:
@meni0n Try using a different method to generate the payload.

Hmm I can’t really find any other tools to generate a .r** I tried two different msf modules and a script off github but no shell ?

In my humble opinion: amazing box! Must congratulate to the author and say a big thank you to TazWake!!

really this box is fun … the initial step is simply magnificent!
the priv esc for root was totally brainfuck for me … but … ROOTED!

:slight_smile:

I tried sending emails with different to and from users, its seems successful. However, there is no response from the payload. Anyone can give me some tips on verifying if its working or not?

The most disturbing thing about this box is that it showed me how much I didn’t know about Windows! Thank you @egre55

Can someone guide me with this box ?

Edit: Never mind. I’m a dummy.

yep older versions of the tool will work, but re-generating data with the new tool is an additional challenge and more fun :slight_smile:
@opt1kz

@egre55 said:
yep older versions of the tool will work, but re-generating data with the new tool is an additional challenge and more fun :slight_smile:
@opt1kz

Yeah, the latter is what I ended up doing. I realized that was a possibility about 10s after I clicked the post button. Lol. I love this box so far, by the way.

lol yeah always the way! gl ?

i am able to get shell! but why i just can’t get out of the stupid shell like can’t move any where only can not too many commands on metepeter session! any one advice how i can scap to diffrent possessor

got root! but i had. hard time moving From Clai*** ad*** privsac

it just wont paypas to the folder Ba*** S*** keep saying access denied reset the Box and then it worked

:)___ very nice box thank to the makers and also thanks to @waspy For the helping and also @pzylence with brainstorming :+1:

Pm if you need help