interceptor

[ancient acorn]

🥳

Please be mindful as a general guideline to not ask for/provide hints in the first 72 hours after a challenge is released. This also covers streaming. 🙏
Ignoring this rule will result in being muted until the hint embargo has been lifted.

During the 72 hours after a challenge is released, you will receive 50% more regular points per question!

Examples:

1. Scoring 80 points (30 regular points + 50 blood points): becomes 45 + 50 = 95 points
2. Scoring 30 points (30 regular points): becomes 45 points

[meager scarab]

Good luck! Unfortunately I'm not home :[

[ancient acorn]

127.0.0.1 ↖️

[flat trellis]

Same condition 😔

[signal tinsel]

GL all, won't claim a spot in the top 10 I think, pretty exhausted and need some rest. For now it seems like the rating is properly set this time 🙂

[pallid vapor]

ghost town today - where is everyone?

[zinc oak]

Celebrating

Or probably still cracking the machine

[pallid vapor]

what are they celebrating? I only know of Cinco de Mayo - on the 5th

[zinc oak]

1st of May is International Workers day for example

But probably people have something to do

[pallid vapor]

i guess i need to get a life😅

[zinc oak]

I feel like I'm missing a crucial thing to solve this coom

[zinc oak]

Nahh, rooting THM boxes it better

Trust me

[pallid vapor]

i've been grinding so hard - i missed Intl' Workers Day -lol

[zinc oak]

So you celebrated it working

[pallid vapor]

the irony;)

[neon timber]

I'm trying but cannot see the missing angle. Will need to come back. Congratz on the blood!

[zinc oak]

Man, I should really stick to blue team

[unborn talon]

What am i missing 😭

[pallid vapor]

nah- gotta switch it up sometimes, if anything just to appreciate what these goblins do just to break in;)

[unborn talon]

@pallid vapor congrats on first blood 😄

[pallid vapor]

ty! sun shines on every dog now and then;)

[strange marsh]

Gave +1 Rep to @unborn talon (current: #1106 - 6)

[zinc oak]

Btw, a little sanity check. Did you also have to restart this machine every 10 minutes or is it something I'm only experiencing

[signal tinsel]

Uhm, no need to restart

[pallid vapor]

hailing fron us-east-1 no issues there;)

[zinc oak]

Alr, then it's either issue with me, EU-Frankfurt server or this new VPN app from THM

[near isle]

[barren lynx]

https://tenor.com/view/yell-gif-6455357819674668227

I'm Stuck here

[native pond]

https://tenor.com/view/naruto-naruto-shippuden-asuma-death-shikamaru-shikamaru-nara-gif-1475856230651778763

[signal tinsel]

I really disliked this one, not only because of the misleading scenario description. What is this!?

[remote delta]

what's the other reasons?

[signal tinsel]

might discuss this after hint embargo is lifted

[remote delta]

sure, i'm curious to hear your opinion

[signal tinsel]

💀

[pallid vapor]

i hear ya, it needed to be done😅

[pallid vapor]

https://klipy.com/gifs/leonardo-dicaprio-shutter-island--k01KQK6FEJ0W8ESEXVNGHVQW1MB

[split plover]

these old type of rooms and PHP, last week and this week, like some 1990 archive was open or something

[split plover]

description should be more on Burp / intercept on second step not first step to remove confusion

[hallow hatch]

so the burp suite wasnt the first step? God i was going insane

[signal tinsel]

Just approach it like every other machine and ignore the scenario description 😊

[hallow hatch]

That's what I decided to do lol

[unborn talon]

mee too bro me too

[hallow hatch]

I was on it since i woke up lmao

[unborn talon]

i will start now xD

i couldnt figure it out yesterday maybe new day new luck lol

[split plover]

yes treat it as AI room. ignore previous instruction and .....

[crude wave]

Now i got a root shell 🙂

[split plover]

root people are you testing Copy Fail vulnerability or something else

[crude wave]

I’ll dm you

[pallid vapor]

i tested copy-fail but they have neutered it (taken os.splice()) away and my workaround from that tipped over the box;). turns out root is much simpler (old school linux privesc)

[oblique agate]

i tried attempting this right when it came out and got stuck right there, and i am still stuck idk what to do. can someone help?

[barren lynx]

I am try 12 vuln all those failed , dont know which is the fu**** trick

[opal scaffold]

I used this one today https://github.com/tgies/copy-fail-c

[signal tinsel]

I actually got the copy fail working 😅 👀

[barren lynx]

shhhhhhhhhhhhhhhhhhhhhit

[signal tinsel]

https://github.com/Sndav/CVE-2026-31431-Advanced-Exploit/blob/master/exploit.py

The detection script I used: https://github.com/liamromanis101/CVE-2026-31431-Copy-Fail---Vulnerability-Detection-Script

[pallid vapor]

should rename it burp-fail for this lab🙃

[worthy osprey]

well, does this has anything to do with||psl|| ?

[low token]

https://www.youtube.com/watch?v=wQ914geKOcw

[barren lynx]

shit tackeove room

[lost sun]

Amazing - I am in 😎

[eager venture]

ok .. learned a new technique .. however root was so easy.. hehe good room

[teal dune]

Copy fail is like "Hurry up, the patching department is hiring" at this time the machine is still vulnerable....

[unborn talon]

way make it more complicated then it has to be xD

[hollow grotto]

hii