Traceback

HTB Content Machines
, , ,
#766

Type your comment> @HomeSen said:

@eMVee said:

Hi guys, i was wondering… I got the user and the root. But the Flag (submit flag) is wrong. I thought I had to paste the hash from the root as flag? Or am I missing something?

Cross-quoting @TazWake from another thread:

@Hashut said:

Is this a problem with the flag submitting system?

I think Multimaster uses a dynamic flag - and it was one of the first to do so. The main advice here is to submit as soon as you root and if that doesn’t work, reset the box, wait a bit and see if there is a new flag you can use.

If you are having problems, it’s definitely worth raising a Jira ticket https://hackthebox.atlassian.net/servicedesk/customer/portal/1

I think the biggest issue is on boxes where you have to do several steps to get root - resetting and retrying may well become tedious. However, on this box it should be ok as you can log in & exploit fairly quickly.

AFAIK, all machines use dynamic flags, by now.

Okay, the root is still the flag to submit to own the system? If so I can do it again…
So the machine was rebooted a few seconds after I had the flag… ?

#767

Yes, you need to submit the content of the root.txt (or user.txt, depending on where you are).
Try resetting the machine, and wait a few minutes before retrieving the (hopefully new) root.txt file.

#768

Rooted :blush:

Nice box!

#769

The root thing… is simply smart… I love this machine… really learn something out of it.

#770

Owned user. Any hint for root?

#771

.

#772

hi, i just got reverse shell and started digging around the filesystem and found 3 files in the obvious directory almost saying they are hints. And other files (igor) with the same file extension.

I used the internetz and it says i need python to run them? but no python still in my terminal. Am i going to the right direction? ive spent some time in the same spot ;_;

thx c;

#773

Finally got root. Finding the webshell took me so long because I got confused by reverse shells uploaded by someone. The webshell has everything you need for the initial foothold.

#774

Rooted! Besides the initial part of the foothold, I loved this box. It was funny.

#775

Wtf! Why are reseting ever 10 minutes???

#776

Can i PM someone to get user hint?

Got user finally

#777

I am a nube and I was hoping that someone could help me with privesc to root. I have successfully accessed the box and managed to get user flag, hopefully by the desired method. I have appended a line to the ‘0xxxxxxxr’ file + some additional steps to get a reverse shell. I have a connection but I am seeing no shell. Thanks

#778

Rooted
Thx @sulcud your tip did it

#779

Got the root flag but still stuck on getting a reverse shell - please DM me with some nudges as it is driving me mad!!!

#780

I stucked on user dm for help pls.

#781

Rooted. This was a fun box! If you’re having trouble with the ssh part try running “ssh-add” on your machine to add the credentials :] DM for hints

#782

Rooted, nice box!

#783

connectivity issue the site is not reachable

#784

@hawksvision said:

connectivity issue the site is not reachable

For issues like this, it is probably better to raise a JIRA ticket so HTB can become aware of the issue and fix it: https://hackthebox.atlassian.net/servicedesk/customer/portal/1

In practical terms, almost no one reading the forum threads can solve a problem with the box.

#785

Finally rooted - thank you @p4ncake for your hints…