my friend john is quite selfish, does not want to share anything.
@igaralf said:
my friend john is quite selfish, does not want to share anything.
Tell him you’ll play with Hashkiller or Crackstation lol
Spoiler Removed - Arrexel
No need for shell
What should I look after being able to RCE? I’m really stucked…
so, I’m able to answer all questions of the challenge. still stucked as, well, you know why. Tried searching different exploits or vulns on the machine. Did not find anything. Will someone light my way?
Yeah, privesc, that mighty thing…
any hints on how to escalate from challenge? I’ve been exhausting ways to deal with wildcard, env variables or even manipulating CLI call for code execution
Hints about path finding? Tried with every combination of extensions (.a****,.d*) but still no luck …
Can’t find any action, can someone help out
I got root yesterday. I learnt. Good machine.
@Randsec said:
I got root yesterday. I learnt. Good machine.
i just got it 2 mins ago, but learned stuff as well along the way
Having trouble with RCE. Found ACTION. Ran multiple exploits vs it. Everything is timing out or err 400. Any help appreciated (PM if possible)
Anyone around for a question on Priv Esc?
@NINGEN said:
@FloptimusCrime said:
@NINGEN said:
@FloptimusCrime said:
The q4 is making me mad. Anyone with leads on this? Please PM meThere’s a specific format that you need to use. Look for a command in john that will list out all available formats.
I got root without solving the puzzle.
True
It’s a bit of a twist.
Ultimately this got me where i wanted to go. I went WAY down the rabbit hole, but learned a lot . Great box
Getting to user was learning about a widespread vulnerability, getting to root was learning (with help) about another vulnerability within a framework. So to pay it forward, you can pm here or on mattermost for nudges. I’d prefer mm as it’s more interactive.
i got command execution RCE, but now i’m stuck, tried reverse shell but i failed. any hint?
I don’t know if reverse shell is possible in this case. RCE doesn’t automatically lead to reverse shell if the machine doesn’t allow opening outbound connections back to the attacker’s machine. If the machine doesn’t allow incoming traffic on ports you can bind, then you have RCE and have to live without a cool shell access.
(Of course I might be wrong, just got RCE an hour ago or so, but it would appear to be that way. I haven’t exhausted all the possibilities for this.)
Could somebody PM me about an usefull wordlist? i have run fuzzdb and seclists. There was no action for me. Also no world greetings =(
Try to use dirbuster-medium wordlsit