Ypuffy

HTB Content Machines
441

Got the root with the easy method, want to know the intended way to get it. Could anyone please help me, many thanks.

442

Root was simple to get due to a recently disclosed vulnerability that affects this box (work smarter not harder). Definitely an interesting way of getting an initial foothold though. I guess p***--* isn’t just for Windows environments.

443

got stuck!!! i have found two user’s and hash what to do next no clues anyone help me out

444

Hello HTB Lovers!!

I have a question with this machine, I try to convert to format a OPENSSH but I see the error.

root@xxxxx:~/Desktop# ssh-keygen -i -e -f axxxe_key_2
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
@ WARNING: UNPROTECTED PRIVATE KEY FILE! @
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
Permissions 0777 for ‘axxxe_key_2’ are too open.
It is required that your private key files are NOT accessible by others.
This private key will be ignored.
Load key “axxxe_key_2”: bad permissions

any idea for this output?

thanks you

445

@p3p1n04s3s1n0 said:
Hello HTB Lovers!!

I have a question with this machine, I try to convert to format a OPENSSH but I see the error.

root@xxxxx:~/Desktop# ssh-keygen -i -e -f axxxe_key_2
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
@ WARNING: UNPROTECTED PRIVATE KEY FILE! @
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
Permissions 0777 for ‘axxxe_key_2’ are too open.
It is required that your private key files are NOT accessible by others.
This private key will be ignored.
Load key “axxxe_key_2”: bad permissions

any idea for this output?

thanks you

you should give 0400 permission

446

@farid007 said:

@p3p1n04s3s1n0 said:
Hello HTB Lovers!!

I have a question with this machine, I try to convert to format a OPENSSH but I see the error.

root@xxxxx:~/Desktop# ssh-keygen -i -e -f axxxe_key_2
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
@ WARNING: UNPROTECTED PRIVATE KEY FILE! @
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
Permissions 0777 for ‘axxxe_key_2’ are too open.
It is required that your private key files are NOT accessible by others.
This private key will be ignored.
Load key “axxxe_key_2”: bad permissions

any idea for this output?

thanks you

you should give 0400 permission

447

@farid007 said:

@farid007 said:

@p3p1n04s3s1n0 said:
Hello HTB Lovers!!

I have a question with this machine, I try to convert to format a OPENSSH but I see the error.

root@xxxxx:~/Desktop# ssh-keygen -i -e -f axxxe_key_2
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
@ WARNING: UNPROTECTED PRIVATE KEY FILE! @
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
Permissions 0777 for ‘axxxe_key_2’ are too open.
It is required that your private key files are NOT accessible by others.
This private key will be ignored.
Load key “axxxe_key_2”: bad permissions

any idea for this output?

thanks you

you should give 0400 permission

448

got a id a***** and a hash , i’m using s******t to connect it wont

session setup failed: NT_STATUS_LOGON_FAILURE

i’m i on the right way??

please help :slight_smile:

449

Just rooted it after pwning the user a while ago. Wanted to do it before it retires. :slight_smile:

That priv esc was really cool, great box!

Thanks to @keresh for helping me with some vague syntaxey stuff. :slight_smile:

450

anyone can help me with s******t syntax. cant connect to the box with creds i’ve got. thanks

451

anyone want to drop a hint on privesc?? I’m at the principals office for stealing keys…

452

nice box , i don’t know root was really easy or i just choosen the easy way , special thanks to @clmtn

453

Got user, managed to use s**-n to craft a new i_ea-ct.p*b, put it back in /.s* … but getting a public key error when trying to S** my way in. :stuck_out_tongue:
Fun and very educational box. I think I might have gotten a MASSIVE headache without that Facebook post just to reach that point.
Now, there is slight detail I feel I have forgotten somewhere … but which one …