Resolute

HTB Content Machines
,
261

Nice box. Although the user part took me too long, but I’ve learned to read more carefully everything I enumerate.

Now some hints, hope it’s not a spoiler.

User:

  1. Enumerate the box like you would any other windows box. There are few tools to get user list.
  2. Read all what you get.
  3. What you found might be valid for someone else…
  4. Did you get everything from nmap?

Root:
step 1: Enumerate more :slight_smile: You don’t need any enumeration tools here. poke at every folder that you find. There are hidden secrets!
step 2: See who you are, google it, don’t overthink - the most simples exploit will work.

262

Took me a bit since I haven’t been into this stuff for a while, first box ever attempted on HTB!

Got root after some messing around

263

I’m at a loss as to why this box showed up when I only had easy boxes checked. It is far from it.

264

Got root. Nice box with a new tip i didn’t know, thanks ! As usual, enumeration was the key…DM me if needed !

265

I can’t seem to find a dnsadmin group. Any nudges would be appreciated

266

Banging my head against the wall on this one. This is my first attempt at any box and am stuck on the gaining root part. I have user 2, I know the AD group the user is in, I know there is an exploit for it but I’m unsure about the next step. Confused as to which tool to use next, there just seems like so many options! Can anyone provide any tips? Thanks in advance.

267

Thx @egre55 , nice box.
PM if you need, just describe in detail where you are stuck

268

Type your comment> @Uglymike said:

Banging my head against the wall on this one. This is my first attempt at any box and am stuck on the gaining root part. I have user 2, I know the AD group the user is in, I know there is an exploit for it but I’m unsure about the next step. Confused as to which tool to use next, there just seems like so many options! Can anyone provide any tips? Thanks in advance.

Google it. There is great article about it.

269

hey, i really need an hint to m**** to r**** … can someone PM me?

270

Type your comment> @HuskyHacks said:

I get an error on my **B ****er:

TreeConnectAndX not found ***.*ll

when trying to pull the *ll to the target.

Google has failed me. Any ideas?

I’m getting the same error can someone give me a nudge on this.

271

Can I please get a hint for very erly foothold? All I have is one user.

Edit: I do now have many users.

272

Type your comment> @Meise said:

hey, i really need an hint to m**** to r**** … can someone PM me?

try harder, keep your eyes open and you’ll find what you are looking for. Sometimes you have to pick up rocks to see what’s underneath…

273

Type your comment> @n3ts3c said:

Type your comment> @Meise said:

hey, i really need an hint to m**** to r**** … can someone PM me?

try harder, keep your eyes open and you’ll find what you are looking for. Sometimes you have to pick up rocks to see what’s underneath…

Thanks,
i am r*** now thx to @Z1LV3R hints c: , now i only have to find this ■■■■ user flag… fking windows :stuck_out_tongue:

274

Got root! Thanks @AlexLTN for the tip!

275

Type your comment> @boris154 said:

Type your comment> @Uglymike said:

Banging my head against the wall on this one. This is my first attempt at any box and am stuck on the gaining root part. I have user 2, I know the AD group the user is in, I know there is an exploit for it but I’m unsure about the next step. Confused as to which tool to use next, there just seems like so many options! Can anyone provide any tips? Thanks in advance.

Google it. There is great article about it.

Do you have the link to that article?

276

Finally rooted. for my first machine on HTB( or ever) it was so fun for me,
the User flag was piece of cake just enumerate and that’s it.
for root everything was so straight forward for me but that AV. i had to create my own exploit and when that works it really worth the c++ coding :smiley:

277

Don’t need to get worry about AV if you use S*B to upload the D*L… =]. If you need a hint just PM.

278

Type your comment> @kirkx said:

Don’t need to get worry about AV if you use S*B to upload the D*L… =]

would appreciate a nudge mate, cannot sleep :frowning:

279

@> @mayanknauni said:

Type your comment> @kirkx said:

Don’t need to get worry about AV if you use S*B to upload the D*L… =]

would appreciate a nudge mate, cannot sleep :frowning:

What is the problem exactly?

280

Type your comment> @kirkx said:

@> @mayanknauni said:

Type your comment> @kirkx said:

Don’t need to get worry about AV if you use S*B to upload the D*L… =]

would appreciate a nudge mate, cannot sleep :frowning:

What is the problem exactly?

PMed you