Starting Point [HTB]

HTB Content Machines
,
61

@squirrelcop I use NAT. Try it or a network bridge.
Does you VM have internet access? Can you ping 10.10.10.27?
If you can’t ping it probably you are on the wrong VPN or VPN doesn’t work. If VPN works it should print “Initialization Sequence Completed” in the end of logs

62

Type your comment> @RobotK said:

Those who can’t ping 10.10.10.27 or/and get Error #487: Your port specifications are illegal. Example of proper form: “-100,200-1024,T:3000-4000,U:60000-” you should first make sure that your vpn connection pack is from the starting point section Login :: Hack The Box :: Penetration Testing Labs. If connection pack is taken from Access section it WILL NOT work. Once you get the VPN for starting point up and running you should be able to ping and get a ports list

use nmap -sC -sV -Pn -p-$ports 10.10.10.27

63

Type your comment> @RobotK said:

@squirrelcop I use NAT. Try it or a network bridge.
Does you VM have internet access? Can you ping 10.10.10.27?
If you can’t ping it probably you are on the wrong VPN or VPN doesn’t work. If VPN works it should print “Initialization Sequence Completed” in the end of logs

I use NAT, tried it with network bridge too, when i type ping 10.10.10.27 nothing happens(like actually nothing shows up)

“Initialization Sequence Completed” shows when i use the vpn too. This problem shows up only when i use kali vm when i’m on my host ubuntu i can ping 10.10.10.27 just fine.

64

I’m having the invalid sequence issue, using kali in virtualbox, I can ping the ip address just fine

kali@kali:~$ ip a
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
       valid_lft forever preferred_lft forever
    inet6 ::1/128 scope host
       valid_lft forever preferred_lft forever
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP group default qlen 1000
    link/ether 08:00:27:1f:30:76 brd ff:ff:ff:ff:ff:ff
    inet 10.0.2.15/24 brd 10.0.2.255 scope global dynamic noprefixroute eth0
       valid_lft 84620sec preferred_lft 84620sec
    inet6 fe80::a00:27ff:fe1f:3076/64 scope link noprefixroute
       valid_lft forever preferred_lft forever
3: tun0: <POINTOPOINT,MULTICAST,NOARP,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UNKNOWN group default qlen 100
    link/none
    inet 10.10.14.96/23 brd 10.10.15.255 scope global tun0
       valid_lft forever preferred_lft forever
    inet6 dead:beef:2::105e/64 scope global
       valid_lft forever preferred_lft forever
    inet6 fe80::edc1:e98f:e338:3d9a/64 scope link stable-privacy
       valid_lft forever preferred_lft forever
kali@kali:~$ ping 10.10.14.96
PING 10.10.14.96 (10.10.14.96) 56(84) bytes of data.
64 bytes from 10.10.14.96: icmp_seq=1 ttl=64 time=0.023 ms
64 bytes from 10.10.14.96: icmp_seq=2 ttl=64 time=0.038 ms
64 bytes from 10.10.14.96: icmp_seq=3 ttl=64 time=0.065 ms
64 bytes from 10.10.14.96: icmp_seq=4 ttl=64 time=0.158 ms
64 bytes from 10.10.14.96: icmp_seq=5 ttl=64 time=0.036 ms
64 bytes from 10.10.14.96: icmp_seq=6 ttl=64 time=0.042 ms
64 bytes from 10.10.14.96: icmp_seq=7 ttl=64 time=0.034 ms
^C
--- 10.10.14.96 ping statistics ---
7 packets transmitted, 7 received, 0% packet loss, time 6299ms
rtt min/avg/max/mdev = 0.023/0.056/0.158/0.043 ms
kali@kali:~$ ports=$(nmap -p- --min-rate=1000 -T4 10.10.14.96 | grep ^[0-9] | cut -d '/' -f 1 | tr '\n' ',' | sed s/,$//)
kali@kali:~$ nmap -sC -sV --verbose -p$ports 10.10.14.96
Starting Nmap 7.80 ( https://nmap.org ) at 2020-05-06 22:06 EDT
Error #487: Your port specifications are illegal.  Example of proper form: "-100,200-1024,T:3000-4000,U:60000-"
QUITTING!

Reading this thread seems i need to use the ip from ifconfig, not necessary 10.10.10.27, which this was explained in the tutorial.

Any idea what’s going wrong? how to debug this?

[Edit] looks like nmap found nothing? all ports are closed?

kali@kali:~$ nmap -p- --min-rate=1000 -T4 10.10.14.96
Starting Nmap 7.80 ( https://nmap.org ) at 2020-05-06 23:08 EDT
Nmap scan report for 10.10.14.96
Host is up (0.000090s latency).
All 65535 scanned ports on 10.10.14.96 are closed

Nmap done: 1 IP address (1 host up) scanned in 1.12 seconds

65

Type your comment

66

Hello,

 I'm stuck on the foothold part of Starting Point.  How do you connect to the sql server?  mssqlclient command is not working for me
67

Type your comment

68

it just says mssqlclient.py command not found?
Im using the newest version of Kali Linux

69

@ekowibowo, no you should nmap 10.10.10.27.
10.10.14.96 - it’s your IP, you will need to use it when getting reverse shell

70

@Razzberry you just need install it GitHub - fortra/impacket: Impacket is a collection of Python classes for working with network protocols. it includes many tool and mssqlclient.py as well

71

Type your comment> @RobotK said:

@Razzberry you just need install it GitHub - fortra/impacket: Impacket is a collection of Python classes for working with network protocols. it includes many tool and mssqlclient.py as well

Thanks @RobotK I’m having trouble installing. Is there any prerequisites im supposed to have.
Python setup.py install is not working?

72

@Razzberry if python is installed doing pip install . inside impacket dir must be enough.

73

@RobotK pip is not installed so im trying to install that now

74

@RobotK I’ve installed pip but when i run pip install on the setup.py I get a couple errors.

  1. Could not find a version that satisfies the requirement setup.py (from versions: none)
  2. No matching distribution found for setup.py

Any suggestions?

75

@Razzberry can you show your command and output ?

76

@RobotK Sorry my copy and paste isn’t working from my VM. The command im using is “pip install setup.py” and the output is the error msgs I stated above

77

@RobotK I was using the wrong command. I was supposed to use “python setup.py install”

78

@RobotK bri978an@kali:~/Downloads/impacket-0.9.21$ pip install setup.py
DEPRECATION: Python 2.7 reached the end of its life on January 1st, 2020. Please upgrade your Python as Python 2.7 is no longer maintained. pip 21.0 will drop support for Python 2.7 in January 2021. More details about Python 2 support in pip, can be found at Release process - pip documentation v23.1.dev0
Defaulting to user installation because normal site-packages is not writeable
ERROR: Could not find a version that satisfies the requirement setup.py (from versions: none)
ERROR: No matching distribution found for setup.py

79

@Razzberry pip install setup.py it’s wrong, it’s suppose to be pip install . (dot in the end means “this dir”)

80

@RobotK Your a life saver! Thank you! I’ve been going nuts over that.