Resolute

HTB Content Machines
,
1

20 minutes to go, looks interesting. Anyone else see this as Linux when it was in “Unreleased”?

2

Lest go xd

3

Can’t find anything! :frowning:

4

Unable to connect

5

I found a lot of users.

6

Well, that was an easy user pwn :smiley:

7

*Spoiler Removed

8

Think someone have tried to be funny and change the password…

9

Easiest user I’ve ever done.

@extincted said:
Think someone have tried to be funny and change the password…

Think more about what you’ve seen, and what it indicates about the system.

10

edit: solved. removing initial post.

11

user.txt
so easy

12

Is ke**********g the way to go?

13

Type your comment> @Ma1ware said:

Is ke**********g the way to go?

No need for that, at least for user

14

HI guys, can you please give me a hint on where to go to get user on resolute, I tried searching for exploits on the services that nmap found, but nothing worked.
Thanks

15

I may have spotted the root vulnerability, could be a rabbit hole

16

I have a bunch of usernames but most options require passwords. The only option from I****ct without password returns nothing. Also is 445 a rabbithole for user?

17

Type your comment> @tang0 said:

I have a bunch of usernames but most options require passwords. The only option from I****ct without password returns nothing. Also is 445 a rabbithole for user?

No. try harder

18

Type your comment> @tang0 said:

I have a bunch of usernames but most options require passwords. The only option from I****ct without password returns nothing. Also is 445 a rabbithole for user?

Check the output from your enumeration process line by line. Since you have the usernames, I guess you probably didn’t see it, due to some error messages.

19

Got into user 2, the hint makes it sound difficult.
Edit: On the edge of root now, interesting vuln.

20

Built my root payload, now to get it executed right