Safe

HTB Content Machines
#27

delete this post pls

@edit
bad hint, i was totally wrong

#28

echo back…i have no idea what to do with that…

#29

Type your comment> @mario713 said:

I managed to force that high port to cooperate. There was one machine on htb where you had the script with ping command and you had to escape it(to get root if i remember correctly), this is something similiar except you need a little bit more than that.

If this hint is too much then let me know and ill edit my post, im noob so I have problems with giving good hints.

Hey Luke,

what is people have not done that box?

#30

Any good articles for decompiling an ELF?

#31

I understood (I hope) what should I do on the high port but it doesn’t execute… how do I make it work? I mean how can I escape the protection…

#32

Any hints on root ?

#33

if we need to do what i think we need to do with the tottaly dope port, thats soooo cool :slight_smile: im loving this

Yeah i think i was wrong. Overexcited :slight_smile: well pushing on

#34

Guys, ignore my previous comments, im noob and I got trolled(by myself), these command execution worked locally :neutral:

#35

Whoever uninstalled python and python3 is a sadist…

#36

How even this box got approved. wasted my precious time today on this. Its simply copy of previous ones…

#37

@D4nch3n Why not add your SSH key to authorized_keys if you have RCE?

#38

Type your comment> @snowscan said:

Why not add your SSH key to authorized_keys if you have RCE?

Whoooooops I forgot you can do that…

Thanks haha

#39

deleted

#40

deleted

#41

i have binary local exploitation in my machine, but doesnt work remote…

#42

Any hint on where to find the binary? Or is that after you figure out the high port?

#43

Type your comment> @liquidpascal said:

Any hint on where to find the binary? Or is that after you figure out the high port?

Enumerate the web a little bit, you will find the file.

#44

Any tips on what to do to crack the .kd** file? hashcat isn’t working…

#45

i need to up my enumeration game, positive realization. Since i afaik have exhausted my wordlists(dirs/files) using the most common tools like dirbuster,gobuster and dirsearach, i am a bit stomped about how to locate the binary. Would anyone mind dropping some names of techniques which i must have overlooked.

It might also be the case that i haven’t gotten to the point, i have found the higher port , interacted with it and also spotted how to make it not wanna talk/answer. and i do believe i understand where this puts me in context of exploitation etc, but its either a blind effort which does not seem to fit with the reports getting hold of the binary (in this thread)

Thanks for your brain!

#46

Type your comment> @Ketil said:

Would anyone mind dropping some names of techniques which i must have overlooked.

Turn off 90% of your brain and just right-click.