Swagshop

■■■■ that machine still down every minute i am so mad right now :confused:

Someone hint me please about priv esc

Please someone help me with the privilege escalation. I found my way however when i run the command I get “sudo: no tty present and no askpass program specified” error.

Edit:
I am finally root after 2 days of “trying harder”. Some people here say that this is an easy box; however, I would say it is, if you know what you should understand the results of a simple command :smile: I was jut looking at the same thing last 2 days, but did not know much about what that results mean. I’ve finally figured it out after learning some Linux basics and I added some beneficial data to my Linux knowledge.

got the root at least thank you for your special hint @Bear

@blacklion I am in the same position you were but not getting any further. Can you PM me with a nudge?

Got root PM for nudge

Type your comment> @EvilMonkee said:

@blacklion I am in the same position you were but not getting any further. Can you PM me with a nudge?

if you don’t have a tty, change it to tty. Google is your friend.

For the love of all thats holy, when accessing M****** C****** on this box please uncheck the maintence mode tick box when you are trying to upload the plugin as you DOS the box for the rest of us…

How do you upload a reverse shell on the F*** S***** after the M****** C****** M******? Everytime I edit the files and run the site. I get a blank index screen. Resetting the box doesn’t clear the blank screen at all… Please pm me I need help where to edit the code.

Spoiler Removed

@EvilMonkee Thanks! I got my webshell on user.

Does anybody know what to do during the webshell portion? I’m stuck on user and I can’t seem to get a reverse shell at all (people seem to say you don’t need a reverse shell tho)

Edit: Just got reverse shell

Edit: ROOOOOTTTTTT Hint: The syntax needs to be perfect (I spent 6 hours doing the executing the right commands but the wrong syntax…)

Got root.
If sombody needs help, PM me.

Got root thanks @FortTheStrox for the nudge

Spoiler Removed

the box is down every 3 minutes, I ran out of resets already

Machine gets unavailable all the time, so annoying.

Type your comment> @Haith said:

can someone pm for a nudge on root ?
i think i know the way to get it but it doesn’t work, even though it should :neutral:

PM for help, in the PM specify what you’re trying to do.

Rooted… ah man, thanks @ch4p for this nice box. Thanks for @Achille and @TigaxMT too :smile:

user & root : Google is your friend as always

user: have to find the right script and learn how to manage M*o , there are cool videos already available.
root: it was a bit tricky for me…with that f
in shell. Finally , have to read what on the screen exactly :smiley: There a several examples on the net how to use that tool for privesc :wink:

Type your comment> @Seth70 said:

Rooted… ah man, thanks @ch4p for this nice box. Thanks for @Achille and @TigaxMT too :smile:

user & root : Google is your friend as always

user: have to find the right script and learn how to manage M*o , there are cool videos already available.
root: it was a bit tricky for me…with that f
in shell. Finally , have to read what on the screen exactly :smiley: There a several examples on the net how to use that tool for privesc :wink:

A little help with user? I think I have the exploit, but the script fails.