Hi everybody! I find the an hash inside a file, then I cracked it. Next I found private and public key. I used the cracked password as the passphrase for the ssh connection but I got an error… I’m in the right way? What’s wrong with the passphrase?
Hello !
Sometimes you need to use another force, Luke.
The “victim” in this case isn’t an average person, what if passwords are different for each service ?
I feel like I’m on the edge of getting root. The more I read the less I understand.
It seems there are four choices to open the door which I seek, but none of them work. Is there a magical dance I must do once the arrow presents itself?
Ok, it was long day and I’m tired, but if you know have been here then you will understand at what point I’m stuck.
Got user somewhat quick but took me a few more days to get root. Understood the concept but couldn’t figure out the correct command. Also not sure why that particular command worked while others did not…
Hmm, I got user, but also I have a word for this user from md5 hash. And I didn’t use it anywhere. Is it some kind of another way to get access or dead end?
Hmm, I got user, but also I have a word for this user from md5 hash. And I didn’t use it anywhere. Is it some kind of another way to get access or dead end?
You can use that word if you try to get user.txt through another channel.
OK… I’m not dumb… I understood the problem: I was submitting user flag from this page: Login :: Hack The Box :: Penetration Testing Labs and it simply doesn’t accept user flag from that page, i think. Furthermore I tought the flag was in ther format HTB{abc_123_xyz}
Hey everyone… I’ve been at this box for awhile. I got the low priv shell and been digging around in config files for awhile now. Sorry… I could really use a push in the right direction. I was able to get a hashed that I was able to crack but it doesn’t seem to work anywhere… egh… fun box tho! I’ll be struggling with this for awhile so If anyone would like to drop a message to me please do. Much appreciated! Thanks!
Really struggling to get a shell on this box. Any help would be appreciated. I know where I need to go to get creds but without a stable shell I’m stumped. Thanks,
bro just use msf ,and do it correctly lhost:vpn ip
GM,
I’m struggling what to do with these user creds. Read the config and man pages. Thought I’d sorted what I need to do sent a S***AL but still not asked for creds. A nudge would be much appreciate.
EDIT:
I’m in… the hints in here are good. I read about the same service provided by Apache; which gave me a light-bulb moment.
Root.
I didn’t use the terminal size people are mentioning. I used a gimme GTFO that was available. I would love a PM on the other path to root if anyone has the time.
Very interesting machine. For me as beginner, the foothold was quite nice and easy.
The user was fairly difficult to me. Root on the other hand was easier than the user.
I was able to root the machine via the j******l go exploit.
However, I was not able to find any usefull informations as to why and how that worked in the first place.
Is anybody willing to explain to me what is happening here? I would like to understand why this worked (or what is broken in the first place).