Traverxec

Is the box down for anyone else? I lose connection every few minutes

Got user.

For people having problems/getting nothing after getting creds : yeah they can be useful somewhere but you must enumerate and read some files to better understand where you can use them :). You should wonder why there are creds here and for what they are needed/supposed to do

Sorry if I say too much, itā€™s my first time giving my opinion and advice here xD

PM if needed

Got user now too.

Go going for rootā€¦ but didnā€™t found anything yet. Can someone PM me a nudge?

rooted

PM for nuggets

Hack The Box

Initial: Fastest foothold Iā€™ve ever got. 2 steps to get an easy shell.
User: Read files carefully, ignore rabbit holes and RTFM.
Root: You should spot the method fast, try it locally to understand how to make it work.

Spoiler Removed

Finally.
Foothold: DDoS? Really? Check the description before run something!
User: check that same place where youā€™ve found those creds. Make yourself familiar with capabilities of the service and ask yourself what permissions should you have to view that content.
Root: was mindblowing for me. Itā€™s right in front of your eyes once you logged in, but you just cannot violate args. Fortunately, there is a way to substitute one thing with another and use the same command to get a shell

Iā€™m a bit stuckā€¦ Iā€™ve found the place mentioned in the interesting file, just canā€™t find anything further, not sure what to do with the credsā€¦

Type your comment> @benhulatt said:

Iā€™m a bit stuckā€¦ Iā€™ve found the place mentioned in the interesting file, just canā€™t find anything further, not sure what to do with the credsā€¦

if you cannot see something it doesnā€™t mean it not exist

Rooted.

Feel free to PM. :slight_smile:

Type your comment> @olsv said:

Type your comment> @benhulatt said:

Iā€™m a bit stuckā€¦ Iā€™ve found the place mentioned in the interesting file, just canā€™t find anything further, not sure what to do with the credsā€¦

if you cannot see something it doesnā€™t mean it not exist

took a moment to understand what you mean, figured it out now, thank you for the tip!

Finally got user thanks to @D3Fix and @olsv . As always something stupid i missed, also found cheetsheet and read it and found another way to get there. funny

got root, it was fun.

rooted!

Much thanks to @rholas and @idomino when I was stuck at user.

Cool box. It was nice and straight forward from start to finish. Perfect way to spend an hour on a lazy sunday. :slight_smile:

For people struggling with root. remember its not always a good idea to maximize ur screen :wink:

Got a low priv shell, could someone help me with user?

btw box goes down likely due to people running the wrong CVE since thereā€™s one for dos

Spoiler Removed

hint for user:
enumerateā€¦ enumerateā€¦ enumerateā€¦
donā€™t brute-force sshā€¦
for root:
GTFOBins is your friendā€¦
PM me if you need help
YaSsInE