Very fun little box, user & rooted 
Learned a lot, and in the end its nice to find the little surprise.
I can log in but cannot get a shell
Rooted
All thanks to @gokuKaioKen and @NPCMaster for guidance in the dark!
Tips:
User:
- man ghostbusters are in town
- credentials needed? what if I store-steal my way in
- google search = easy reverse-shell
Root:
-just enumerate, run the most basic command, youâll see it
PM for help if you need
Type your comment> @NPCMaster said:
@AndreiPintea said:
Any nudge on from people who already got user on how to decrypt the m****** pass?
pm me
Yeah stuck on the admin page
I hate script kiddies who just hammer the machine like monkeys then reset it every 2 minutes even on vip.
Yes, Iâm ranting
Just because itâs one of the easiest machines doesnât mean everyone should be allowed to hammer it as if there were no tomorrow.
Type your comment> @halfluke said:
I hate script kiddies who just hammer the machine like monkeys then reset it every 2 minutes even on vip.
Yes, Iâm ranting
Just because itâs one of the easiest machines doesnât mean everyone should be allowed to hammer it as if there were no tomorrow.
Youâre so right⌠It doesnât even require any hammering. Itâs all one smooth process.
AND we can order real swag once its rooted!
Loved this box
Type your comment> @Spenge said:
Type your comment> @halfluke said:
I hate script kiddies who just hammer the machine like monkeys then reset it every 2 minutes even on vip.
Yes, Iâm ranting
Just because itâs one of the easiest machines doesnât mean everyone should be allowed to hammer it as if there were no tomorrow.Youâre so right⌠It doesnât even require any hammering. Itâs all one smooth process.
AND we can order real swag once its rooted!Loved this box
Some of those products actually look neat.
Type your comment> @AndreiPintea said:
Type your comment> @Spenge said:
Type your comment> @halfluke said:
I hate script kiddies who just hammer the machine like monkeys then reset it every 2 minutes even on vip.
Yes, Iâm ranting
Just because itâs one of the easiest machines doesnât mean everyone should be allowed to hammer it as if there were no tomorrow.Youâre so right⌠It doesnât even require any hammering. Itâs all one smooth process.
AND we can order real swag once its rooted!Loved this box
Some of those products actually look neat.
Yea they do, i bought the horizontal sticker pack
Wow LOL.
This box was a good reason for me to be back in hack the box for a while. VERY NICE advertising strategy. I would actually recommend keeping it this way or at least keep some âlimited editionâ ones in here.
Just bought everything âŚ
Type your comment> @Ryan412 said:
Wow LOL.
This box was a good reason for me to be back in hack the box for a while. VERY NICE advertising strategy. I would actually recommend keeping it this way or at least keep some âlimited editionâ ones in here.
Just bought everything âŚ
Everything!? WOW
Yes i agree, this was such a nice surprise.
Love this way of advertising, brought a smile to my face.
Do you think itâll be fully released to public once itâs all done?
Type your comment> @Spenge said:
Type your comment> @Ryan412 said:
Wow LOL.
This box was a good reason for me to be back in hack the box for a while. VERY NICE advertising strategy. I would actually recommend keeping it this way or at least keep some âlimited editionâ ones in here.
Just bought everything âŚ
Everything!? WOW
Yes i agree, this was such a nice surprise.
Love this way of advertising, brought a smile to my face.Do you think itâll be fully released to public once itâs all done?
Given that they said that it is âbetaâ it will probably be released. Especially that the box will be retired eventually. Unless ⌠if they did the same idea with a new box later Which will also be fun ! I would highly recommend keeping some limited âthingsâ for people who hack machines and other regular things to people who donât.
Sooo I can see the obvious priv escâŚ
When I try to run the command, Iâm being asked for something that I shouldnât need to give based on what Iâve seen. Anyone have an idea why this is happening? (If you can understand what Iâm alluding to as I try not to spoil)
Type your comment> @Ryan412 said:
Type your comment> @Spenge said:
Type your comment> @Ryan412 said:
Wow LOL.
This box was a good reason for me to be back in hack the box for a while. VERY NICE advertising strategy. I would actually recommend keeping it this way or at least keep some âlimited editionâ ones in here.
Just bought everything âŚ
Everything!? WOW
Yes i agree, this was such a nice surprise.
Love this way of advertising, brought a smile to my face.Do you think itâll be fully released to public once itâs all done?
Given that they said that it is âbetaâ it will probably be released. Especially that the box will be retired eventually. Unless ⌠if they did the same idea with a new box later
Youâre right, its smart for them to see how they can handle the pressure from customers, logistics can be hard to handle when suddenly thousands of orders come in.
But yes youâre right keeping limited items would be nice, hence you bought every single item?
Perhaps the t-shirt will become an OG item within a couple of months lol.
I only bought stickers
Some hints for user ? I enumerated pretty much everything, tried default creds on those login panels, found some weird crypt key and pass, searched for known cveâs but dont know how to get around those login panels
Type your comment> @p1azm0id said:
Type your comment> @PavelKCZ said:
Anyone have an idea, why the script always ends with âDID NOT WORKâ ?
wrong exploit, contains path that doesnât exist
Nope - correct exploit.
Exploit is correct) Try another source to download it.
Thanks for the box.
Type your comment> @Spenge said:
Type your comment> @Ryan412 said:
Type your comment> @Spenge said:
Type your comment> @Ryan412 said:
Wow LOL.
This box was a good reason for me to be back in hack the box for a while. VERY NICE advertising strategy. I would actually recommend keeping it this way or at least keep some âlimited editionâ ones in here.
Just bought everything âŚ
Everything!? WOW
Yes i agree, this was such a nice surprise.
Love this way of advertising, brought a smile to my face.Do you think itâll be fully released to public once itâs all done?
Given that they said that it is âbetaâ it will probably be released. Especially that the box will be retired eventually. Unless ⌠if they did the same idea with a new box later
Youâre right, its smart for them to see how they can handle the pressure from customers, logistics can be hard to handle when suddenly thousands of orders come in.
But yes youâre right keeping limited items would be nice, hence you bought every single item?
Perhaps the t-shirt will become an OG item within a couple of months lol.
I only bought stickers
There are only 3 items man LOL. Itâs not like they have 10 of them.
stuck on creds any hint where locate
i found db password but wron login
Type your comment> @SN01 said:
stuck on creds any hint where locate
i found db password but wron login
Make your own creds 
Thanks @ch4p for the great experience!
For those of you who are getting hard time on this box, donât give up. If you canât do it today, get some sleep and try again. For user you need to adjust some things on your favour, and for root you have it all in front of you! 