sand glen Apr 25, 2020, 5:28 AM

#

📎 unknown.png

#

anyone for help #Advent of Cyber room

stuck fractal Apr 25, 2020, 5:29 AM

#

Grep.

sand glen Apr 25, 2020, 5:29 AM

#

I checked all the files
they're encoded but I don't know how to decode them
I tried base64 -d and redirecting the output to a file
but when I use the file command with the newly created file
I get : file : data

stuck fractal Apr 25, 2020, 5:29 AM

#

You don't need to decode them

sand glen Apr 25, 2020, 5:30 AM

#

i already used grep and got only encoded output

stuck fractal Apr 25, 2020, 5:30 AM

#

The information you're looking for is in there, in amongst the text

#

You just gotta grep with some nice regex

sand glen Apr 25, 2020, 5:30 AM

#

oh, I'm really bad at regex xD

stuck fractal Apr 25, 2020, 5:33 AM

#

digit digit dot digit dot digit match exact

#

Might need another dot digit

sand glen Apr 25, 2020, 5:34 AM

#

got it

#

[0-9]\.[0-9]

stuck fractal Apr 25, 2020, 5:37 AM

#

\d

#

If you have it in the right mode.

sand glen Apr 25, 2020, 5:38 AM

#

thanks alot for the help

patent token Apr 25, 2020, 5:57 AM

#

Is the buffer overflow room borked?

stuck fractal Apr 25, 2020, 5:58 AM

#

I think there was some talk of a fix for one of the tasks @patent token

patent token Apr 25, 2020, 5:59 AM

#

Task 8 I believe. I got excited when I saw some folks had finished it, but I've for the life of me not been able to. And I'm usually pretty good at BoF

sick sun Apr 25, 2020, 11:51 AM

#

anyone done NAX room ?

dull frost Apr 25, 2020, 12:31 PM

#

@sick sun I am, just need to finish 1 question. But I used a different exploit so I just have to find the one asked in the question lol

sick sun Apr 25, 2020, 12:38 PM

#

Can i PM you ?

solid patrol Apr 25, 2020, 12:41 PM

#

there is msf module with cve in that room

sick sun Apr 25, 2020, 12:43 PM

#

@solid patrol can i pm you ?

solid patrol Apr 25, 2020, 12:43 PM

#

go for it

normal totem Apr 25, 2020, 12:58 PM

#

Hello, i try finding this answer but i cannot find it on goole:
What are automated tasks called in Linux?

#

i found a thing such corntabs but it doesnt work

#

the structure is **** ****

#

2 words made of 4 letters

white salmon Apr 25, 2020, 1:00 PM

#

what room? @normal totem

normal totem Apr 25, 2020, 1:00 PM

#

Introductory Researching

white salmon Apr 25, 2020, 1:01 PM

#

oh then, you're in the good way

#

something about you said

normal totem Apr 25, 2020, 1:01 PM

#

i will look further now

white salmon Apr 25, 2020, 1:02 PM

#

have you looked at the hint? @normal totem

normal totem Apr 25, 2020, 1:02 PM

#

yes..

#

but i found the same page

white salmon Apr 25, 2020, 1:03 PM

#

i heard linuxtechi is a good page

normal totem Apr 25, 2020, 1:03 PM

#

okay, i look now 🙂

#

oh i got it 😄

#

thanks for the help

white salmon Apr 25, 2020, 1:05 PM

#

np ^^

dull frost Apr 25, 2020, 1:14 PM

#

@sick sun yes of course

white salmon Apr 25, 2020, 1:29 PM

#

In corp 3#3 I can't make hashcat work, keeps saying "Status exhausted"

glossy basin Apr 25, 2020, 1:38 PM

#

@white salmon check that your mode is set correctly

white salmon Apr 25, 2020, 1:39 PM

#

hm wdym @glossy basin ?

dull frost Apr 25, 2020, 1:39 PM

#

anyone wanna help me out with identifiying and cracking a hash?

white salmon Apr 25, 2020, 1:44 PM

#

well now it says that

📎 SPOILER_unknown.png

glossy basin Apr 25, 2020, 1:45 PM

#

@white salmon verify your hash with it https://hashcat.net/wiki/doku.php?id=example_hashes

#

okay it's cracked

white salmon Apr 25, 2020, 1:45 PM

#

had spaces and fixed, tried doing again and says that with candidates huh

solid patrol Apr 25, 2020, 1:45 PM

#

u cracked that hash

glossy basin Apr 25, 2020, 1:45 PM

#

you are supposed to see the password then

#

no it's not in candidates

solid patrol Apr 25, 2020, 1:45 PM

#

it should be above info of that picture u send in format hash:cracke

white salmon Apr 25, 2020, 1:46 PM

#

oh yeah sry

glossy basin Apr 25, 2020, 1:46 PM

#

yeah

white salmon Apr 25, 2020, 1:46 PM

#

ty

normal totem Apr 25, 2020, 1:48 PM

#

I still need some help finishing this task to finish the room

#

but i still cannot find 2 answers

glossy basin Apr 25, 2020, 1:48 PM

#

which one

#

room

normal totem Apr 25, 2020, 1:48 PM

#

on the Introductory Researching

glossy basin Apr 25, 2020, 1:49 PM

#

ohh

normal totem Apr 25, 2020, 1:49 PM

#

the second topic

glossy basin Apr 25, 2020, 1:49 PM

#

that's only on you

#

try harder

normal totem Apr 25, 2020, 1:49 PM

#

okay..

#

it is so confusing

sick sun Apr 25, 2020, 2:02 PM

#

Nvm i got it

white salmon Apr 25, 2020, 2:09 PM

#

@normal totem what do you need

normal totem Apr 25, 2020, 2:09 PM

#

i got it 🙂

#

took me just 30 min 😄

white salmon Apr 25, 2020, 2:10 PM

#

oh

wintry crown Apr 25, 2020, 2:55 PM

#

Hi guys, meed help for this. Accessed blogengine website and tried to login but showing error. Password is breaked, but when entering it is showing something like ‘oops, developer caused this issue, appolgies, 20lashes to him vlah blah’

lime needle Apr 25, 2020, 2:59 PM

#

Anyone doin nax

past night Apr 25, 2020, 3:00 PM

#

what's up with nax?

grand pivot Apr 25, 2020, 3:06 PM

#

Hi everyone!

white salmon Apr 25, 2020, 3:06 PM

#

hi

static rampart Apr 25, 2020, 3:07 PM

#

need help with nax

grand pivot Apr 25, 2020, 3:07 PM

#

I was at 4am yesterday, starting with x86 crackme and i was so confused xD im going to watch it again now that i am awake

past night Apr 25, 2020, 3:07 PM

#

if you can be more specific about what you need help with

#

@static rampart

static rampart Apr 25, 2020, 3:11 PM

#

at foothold

past night Apr 25, 2020, 3:20 PM

#

revise your chemistry

nocturne vault Apr 25, 2020, 3:41 PM

#

also stuck there..

#

smtp pmpl?

static rampart Apr 25, 2020, 3:55 PM

#

can any one know about .zlib extension

past night Apr 25, 2020, 4:19 PM

#

i don't think you are doing it right ^^

#

use the information you got from the other tasks

crude swan Apr 25, 2020, 4:21 PM

#

Hey there!

#

I need help with Nax too lol

#

What's up with the spoilers here?

#

I'm assuming that I can't share my findings so far... 😛

white salmon Apr 25, 2020, 4:22 PM

#

we are discussing in -help

#

few of us are stuck

crude swan Apr 25, 2020, 4:23 PM

#

how do I go to -help?

#

I'm new in discord, sorry

white salmon Apr 25, 2020, 4:23 PM

#

its the other room, community-help under "Rooms"

crude swan Apr 25, 2020, 4:24 PM

#

Found it! Ty!

white salmon Apr 25, 2020, 4:28 PM

#

In hackpart my meterpreter session doesn't seem to work, I've uploaded the shell into the machine but nothing

quaint star Apr 25, 2020, 4:54 PM

#

anyone any help for Nax ? stuck so bad 3 hrs deep

white salmon Apr 25, 2020, 4:56 PM

#

people keep saying Chemistry, periodic table of elements and this referring to the .html page

quaint star Apr 25, 2020, 4:58 PM

#

yeah looking at the different elements, hard to come up with something

white salmon Apr 25, 2020, 4:59 PM

#

same

#

i'm not for the ctf type stuff

quaint star Apr 25, 2020, 5:00 PM

#

yeah

#

i feel yah

still elm Apr 25, 2020, 5:12 PM

#

i can't solve Task 3 #7 in PS Empire. i can't find how to change the server appearence

wooden hollow Apr 25, 2020, 6:33 PM

#

@lime needle yes what u need ?

proud scarabBOT Apr 25, 2020, 7:00 PM

#

stuck fractal Apr 25, 2020, 7:01 PM

#

@odd belfry #bot-commands

odd belfry Apr 25, 2020, 7:03 PM

#

oh sorry

stuck fractal Apr 25, 2020, 7:04 PM

#

Especially in the hints channel, since it's a bit of a spoiler

odd belfry Apr 25, 2020, 7:21 PM

#

i cannot delete it sorry

white salmon Apr 25, 2020, 8:35 PM

#

NAX.

#

Should gobuster error on this box

white salmon Apr 25, 2020, 10:49 PM

#

Uh may someone give me a hint in skynet? I cant ||smb||map into the machine, it says "Authentication error"

ruby junco Apr 25, 2020, 10:51 PM

#

Should gobuster error on this box
@white salmon what error?

turbid bloom Apr 26, 2020, 2:31 AM

#

wait a minute i want to ask about Linux Challenges

#

flag11 command found

turbid bloom Apr 26, 2020, 3:09 AM

#

ah i got it i logged in the wrong user

remote gate Apr 26, 2020, 3:39 AM

#

@white salmon i was getting errors in gobuster after a few minutes. ||ended up not needing gobuster.||

late hare Apr 26, 2020, 4:28 AM

#

Anyone got a hint to point me in the right direction for OWASP juiceshop room resetting jim's password/finding more info about him

quaint star Apr 26, 2020, 4:34 AM

#

anyone finished Nax ? stuck with exploit

stuck fractal Apr 26, 2020, 4:38 AM

#

@late hare osint

#

More specifically, product reviews

remote gate Apr 26, 2020, 4:43 AM

#

@quaint star i finished it. where are you stuck?

late hare Apr 26, 2020, 4:44 AM

#

Thanks! Like reviews on the site? I looked through a few, found admin section for his email but that's it so far. Gonna call it tonight I'll try again tomorrow

stuck fractal Apr 26, 2020, 4:45 AM

#

@late hare for products. Some juicy hints in those and some mild stalking and you'll get it.

quaint star Apr 26, 2020, 4:45 AM

#

briskets can i dm, dont want to spoil for anyone

#

@remote gate

late hare Apr 26, 2020, 4:46 AM

#

@stuck fractal ahh ok didn't see there are reviews listed in the individual products maybe i'll find it there

turbid bloom Apr 26, 2020, 5:17 AM

#

i can't locate flag26 in Linux Challenges room

grand pivot Apr 26, 2020, 6:11 AM

#

Hi everyone! Im doing the final exam in CC radare2 and im a little stuck when i try to follow the get_password function. Can you give me some advice?

white salmon Apr 26, 2020, 6:16 AM

#

salve

#

I made the room, what's up @grand pivot

#

let's go to #room-help

grand pivot Apr 26, 2020, 6:16 AM

#

oooh hello!! Great, ok

shadow basin Apr 26, 2020, 11:11 AM

#

Hi, has anyone made made a walkthrough to room 'Advent of Cyber'. I cant figure out how to encode the cookie. I have tried "base64 'cookie value'" and it still gives out some gibberish, which doesnt help me to figure out which part of cookie 'is fixed value'. Any advice is appreaciated.

glossy basin Apr 26, 2020, 11:12 AM

#

do want a writeup or a hint?

shadow basin Apr 26, 2020, 11:13 AM

#

@glossy basin anything is appreaciated.

glossy basin Apr 26, 2020, 11:13 AM

#

https://www.base64encode.org/
you can use this website to encode ^

Base64 Encode

Base64 Encode and Decode - Online

Encode to Base64 or Decode from Base64 with advanced formatting options. Enter our site for an easy-to-use online tool.

past night Apr 26, 2020, 11:13 AM

#

there is a write up i think

glossy basin Apr 26, 2020, 11:13 AM

#

and decode also

#

there is a write up i think
@past night at least 4 writeups

past night Apr 26, 2020, 11:14 AM

#

hehe

#

true

shadow basin Apr 26, 2020, 11:14 AM

#

where can i find them?

glossy basin Apr 26, 2020, 11:14 AM

#

cookies?

#

in inspection tools

past night Apr 26, 2020, 11:14 AM

#

under the write ups

glossy basin Apr 26, 2020, 11:15 AM

#

!writeup 25daysofchristmas

proud scarabBOT Apr 26, 2020, 11:15 AM

#

TryHackMe

Advent of Cyber

http://tryhackme.com/room/25daysofchristmas

By: dejadk

https://pastebin.com/a4XpDg4J

By: MuirlandOracle

https://medium.com/@MuirlandOracle/thm-christmas-2019-challenge-write-up-72391085e1de?source=friends_link&sk=f94252e53e4c4c22b9e7c82c767d41d8

By: DesKel

https://www.embeddedhacker.com/2019/12/hacking-walkthrough-thm-cyber-of-advent/

By: Horshark

https://github.com/horshark/thm_hacking_encyclopedia/blob/master/THM_hacking_encyclopedia.pdf

By: Cy1603

https://git.io/JvaCr

glossy basin Apr 26, 2020, 11:15 AM

#

here ^

shadow basin Apr 26, 2020, 11:15 AM

#

@glossy basin amazing thank you so much.

glossy basin Apr 26, 2020, 11:16 AM

#

anytime

white salmon Apr 26, 2020, 11:32 AM

#

@minor bough can I DM about blaster?

#

or anyone that might have had issues creating the exploit in msf?

shadow basin Apr 26, 2020, 11:38 AM

#

Can someone explain why he has, blacked out information in writeup. Is it some kind of sensitive information?

📎 task6.png

normal peak Apr 26, 2020, 11:38 AM

#

It stops people coping the flags

white salmon Apr 26, 2020, 11:39 AM

#

there are few writeups that doesnt have that

normal peak Apr 26, 2020, 11:40 AM

#

To just answer the question without actually doing the task

shadow basin Apr 26, 2020, 11:40 AM

#

ok got it

white salmon Apr 26, 2020, 11:42 AM

#

In Skynet I've looked into the db-exploit but still don't know how can I upload the file, any hint?

shadow basin Apr 26, 2020, 11:49 AM

#

btw is it considered to be unetical to show the flag to others?

white salmon Apr 26, 2020, 11:50 AM

#

try to spoil it with ||

#

@minor bough in Blaster, the steps to create the exploit need to have "set target" before "set payload" or you get error when "run -j" payload not compatible

inland onyx Apr 26, 2020, 12:17 PM

#

@shadow basin yes. It's fine to help, but don't show people passwords, hashes, or anything else that lets them skip stuff

shadow basin Apr 26, 2020, 12:23 PM

#

thanks @inland onyx there is no much i can spoil at the moment, but will keep it in mind for the future.

minor bough Apr 26, 2020, 12:51 PM

#

@white salmon good call, I'll tweak the ordering there

minor bough Apr 26, 2020, 1:33 PM

#

Adjusted now

white salmon Apr 26, 2020, 1:34 PM

#

Great, nice room btw

minor bough Apr 26, 2020, 1:37 PM

#

Thanks!

shadow basin Apr 26, 2020, 2:19 PM

#

Does anyone know is there a chance to run two distributions at the same time.

#

besides vmware

inland onyx Apr 26, 2020, 2:25 PM

#

@shadow basin As in, dual booting?

tidal sedge Apr 26, 2020, 2:25 PM

#

I think they mean running two distributions simultaneously

inland onyx Apr 26, 2020, 2:26 PM

#

Well, in that case, no. Not without containerisation, VM's, or two machines 🤷‍♂️

shadow basin Apr 26, 2020, 2:26 PM

#

yes simultaneusly, similar to vmware, but would like to know if there is other option someone might know

#

yes with containerisation

tidal sedge Apr 26, 2020, 2:27 PM

#

Docker

inland onyx Apr 26, 2020, 2:27 PM

#

It'll have to be done either with another hypervisor, or through something like Docker, which does basically the same job

#

But without the resource heavy hypervisor

#

No GUIs if you use Docker

#

Although I would be very interested to see what happens if you try setting up an RDP server and connecting that way (having installed a DE)

shadow basin Apr 26, 2020, 2:28 PM

#

but will it be compleatly seperate system

normal totem Apr 26, 2020, 2:28 PM

#

Hey

#

can anyone help me with this question:
What is the value of the home environment variable

inland onyx Apr 26, 2020, 2:28 PM

#

Nope, still just a container @shadow basin

tidal sedge Apr 26, 2020, 2:28 PM

#

echo $HOME

normal totem Apr 26, 2020, 2:29 PM

#

the format is /xxxx/xxxxxx

shadow basin Apr 26, 2020, 2:30 PM

#

@inland onyx does it mean that two kernels will be running at the same time ?

inland onyx Apr 26, 2020, 2:30 PM

#

I mean, in a sense -- only in the same way that they would be in a hypervisor though

#

Also, probably better shifting this over to #692465827143876689

white salmon Apr 26, 2020, 2:31 PM

#

can someone possibly help with a ssh2john issue?

#

throwing errors

normal totem Apr 26, 2020, 2:31 PM

#

@tidal sedge ?

tidal sedge Apr 26, 2020, 2:32 PM

#

@normal totem What room are you doing?

shadow basin Apr 26, 2020, 2:33 PM

#

@normal totem if you would 'echo $HOME' it would give you the output /xxxx/xxxxx

normal totem Apr 26, 2020, 2:33 PM

#

learn linux

tidal sedge Apr 26, 2020, 2:33 PM

#

@normal totem Use echo $HOME

normal totem Apr 26, 2020, 2:35 PM

#

ah i got it

#

i was doing it wrong

#

Thanks 🙂

white salmon Apr 26, 2020, 2:38 PM

#

:
anyone have issues with ssh2john throwing indexError: list index out of range when using?

#

hello on agent sudo what's the name of the accident, i'tried a lot of thing

minor bough Apr 26, 2020, 2:47 PM

#

Google 'roswell new mexico alien crash'

white salmon Apr 26, 2020, 2:51 PM

#

no idea ...

patent token Apr 26, 2020, 3:05 PM

#

Hey! Blaster has my exploit chain in it now. Woot!

#

I'll take "alternatively" out of my guide I'm writing now. 😛

minor bough Apr 26, 2020, 3:28 PM

#

Haha yeah, I just adjusted it as it was very consistent with the web delivery method

buoyant cairn Apr 26, 2020, 3:36 PM

#

if anyone has done Polos privesc and would like to offer some assistance ❤️

📎 unknown.png

patent token Apr 26, 2020, 3:37 PM

#

I'll cover it in my no metasploit guide doing it this way. 🙂

📎 SPOILER_unknown.png

long niche Apr 26, 2020, 3:38 PM

#

Hi, am doing "CC: Pen Testing" am stacking in section 14 question 3 "How do you specify which rule to use?" ?? which i try "-rules"
but didn't work is it a bug ?

stuck fractal Apr 26, 2020, 3:45 PM

#

@long niche No, your answer is wrong

#

@buoyant cairn Re-read how the imitation works

long niche Apr 26, 2020, 3:49 PM

#

ok thank u

patent token Apr 26, 2020, 3:50 PM

#

||or just disable the firewall from the command line :P||

#

I'm so naughty.

steady stratus Apr 26, 2020, 3:52 PM

#

kekw

long niche Apr 26, 2020, 4:04 PM

#

@buoyant cairn i should use brackets but should i define a rule here or something

buoyant cairn Apr 26, 2020, 4:06 PM

#

@long niche ? say again

stuck fractal Apr 26, 2020, 4:06 PM

#

@long niche man john or john --help

#

try harder

warm schooner Apr 26, 2020, 4:07 PM

#

tldr is also a great helper function

naive peak Apr 26, 2020, 4:11 PM

#

Can anyone hint me in the right direction regarding brainpan

#

I've managed to get a shell

#

but am unsure how to evscalate.

long niche Apr 26, 2020, 4:15 PM

#

@stuck fractal i did 😄 but ..

stuck fractal Apr 26, 2020, 4:15 PM

#

@long niche Then you didn't read the output. I just ran it and got the answer straight away

long niche Apr 26, 2020, 4:17 PM

#

@stuck fractal ok i will search again

long niche Apr 26, 2020, 4:34 PM

#

believe me i read and i try many answers

stuck fractal Apr 26, 2020, 4:34 PM

#

@long niche Seriously, it's 100% right there in --help.

long niche Apr 26, 2020, 4:36 PM

#

if ur talking about --single i tried it

stuck fractal Apr 26, 2020, 4:36 PM

#

You're looking at specifying a rule. Don't bruteforce the answer field. @long niche

#

Read the output of --help.

civic schooner Apr 26, 2020, 4:41 PM

#

Hi

long niche Apr 26, 2020, 4:44 PM

#

hi

#

:/

#

i read it but i didn't get it

stuck fractal Apr 26, 2020, 4:46 PM

#

@long niche There's like 4 sections to the help output. One of them looks relevant.

white salmon Apr 26, 2020, 4:52 PM

#

Can I ask if Stego is required for NAX?

#

I have author but stuck on username

long niche Apr 26, 2020, 4:56 PM

#

@stuck fractal the answer [6 chars], i even use john --help | grep rule but nothing

stuck fractal Apr 26, 2020, 4:56 PM

#

@long niche There's no other way of saying this. It's there. try harder

long niche Apr 26, 2020, 4:58 PM

#

are u using kali ?

stuck fractal Apr 26, 2020, 4:58 PM

#

It's right there on kali too

long niche Apr 26, 2020, 5:00 PM

#

believe me a even try random words but nothing

past night Apr 26, 2020, 5:01 PM

#

sudo john --help

stuck fractal Apr 26, 2020, 5:03 PM

#

@long niche I don't believe you. It's 100% there on Kali and Windows.

#

@past night reeee

past night Apr 26, 2020, 5:03 PM

#

yes?

stuck fractal Apr 26, 2020, 5:03 PM

#

Throwing sudo at something is bad if you don't need it

past night Apr 26, 2020, 5:04 PM

#

it doesn't work on 2020 without sudo

long niche Apr 26, 2020, 5:04 PM

#

am using root user

#

so no need

stuck fractal Apr 26, 2020, 5:04 PM

#

Which kali?

long niche Apr 26, 2020, 5:05 PM

#

kali 4

past night Apr 26, 2020, 5:05 PM

#

plz.

stuck fractal Apr 26, 2020, 5:05 PM

#

It's there

past night Apr 26, 2020, 5:06 PM

#

with sudo, yes

stuck fractal Apr 26, 2020, 5:06 PM

#

@long niche No such thing.

#

@past night They're not on 2020

past night Apr 26, 2020, 5:07 PM

#

okii

long niche Apr 26, 2020, 5:07 PM

#

Linux kali 5.4.0-kali4-amd64Linux kali 5.4.0-kali4-amd64 i just upgrade it should be 2020

shadow basin Apr 26, 2020, 5:09 PM

#

Does anyone can explain where did the register button has dissapeared. "Advert of Cyber"

📎 pic-selected-200426-1807-22.png

stuck fractal Apr 26, 2020, 5:10 PM

#

@long niche It's there. DM me a screenshot of the output of john --help and I'll tell you that it's there

#

@shadow basin Page width

long niche Apr 26, 2020, 5:10 PM

#

i had the same output

stuck fractal Apr 26, 2020, 5:10 PM

#

Huh?

long niche Apr 26, 2020, 5:10 PM

#

i try every word

stuck fractal Apr 26, 2020, 5:10 PM

#

Then you're not doing it right

long niche Apr 26, 2020, 5:11 PM

#

believe me i tried every syntax

stuck fractal Apr 26, 2020, 5:12 PM

#

I don't believe you, because it worked for me here. DM me a screenshot of the output of john --help and I'll tell you if it's there.

shadow basin Apr 26, 2020, 5:12 PM

#

@stuck fractal

📎 pic-selected-200426-1810-57.png

stuck fractal Apr 26, 2020, 5:12 PM

#

Page zoom then

shadow basin Apr 26, 2020, 5:13 PM

#

It started to work much faster now, but there is no more register button and old login credentials doesnt work anymore.

stuck fractal Apr 26, 2020, 5:14 PM

#

If you terminated it, it's a whole new instance the next time you deploy it

shadow basin Apr 26, 2020, 5:15 PM

#

yes but when I try to register with the same email, it doesnt allow anymore. Thats not a big deal, I just use 10 minute mail to bypass it, however there is no "register" button anymore.

#

but used to be

shadow basin Apr 26, 2020, 5:32 PM

#

@stuck fractal I found what is the issue, I did not realize that "Advent of Cyber" task 6 and task 7 are two different machines. I guess task 7 machine "register" button does not meant to be there.

dense marlin Apr 26, 2020, 6:09 PM

#

hey there

tidal sedge Apr 26, 2020, 6:10 PM

#

👋

dense marlin Apr 26, 2020, 6:10 PM

#

can i get some hint for nax machine? tried to brute force the web directory with ffuf but still unable to find the hidden file

plucky echo Apr 26, 2020, 6:11 PM

#

anyon?

dense marlin Apr 26, 2020, 6:12 PM

#

trying to read the source code of login.php to find the hidden file but no luck man

tranquil dagger Apr 26, 2020, 6:12 PM

#

You can PM me @dense marlin

dense marlin Apr 26, 2020, 6:13 PM

#

cool

white salmon Apr 26, 2020, 6:39 PM

#

FFUF @dense marlin

#

THANK YOU

#

I've been trying to figure out what that bloody tool was called for weeks

#

God it was driving me insane every few days

dense marlin Apr 26, 2020, 6:53 PM

#

@white salmon ya FFUF, it's ok managed to solved the initial part. Thanks for the hint from @tranquil dagger

proven bridge Apr 26, 2020, 6:59 PM

#

FFUF @dense marlin
@white salmon FFUFFFF

dense marlin Apr 26, 2020, 7:00 PM

#

yea that's a great tool for web directory enum @white salmon

white salmon Apr 26, 2020, 7:00 PM

#

Wfuzz has been my go to

#

But a buddy of mine said FFUF was better

#

So I meant to install it

#

But I could never remember the name

dense marlin Apr 26, 2020, 7:06 PM

#

been using FFUF for months, i can say tht it's much faster than dirbuster

#

u should give tht tool a try

white salmon Apr 26, 2020, 7:24 PM

#

Everyone using gobuster

#

Me an intellectual: uses dirsearch

#

I need to get on the gobuster train ;-;

white salmon Apr 26, 2020, 7:48 PM

#

I’m 50% on the NAX box

#

I’ve tried harder. Can anyone help nudge me

#

I don’t want answers, just someone to point me in a direction to retrieve one final piece

still elm Apr 26, 2020, 7:54 PM

#

@white salmon where are you stuck?

white salmon Apr 26, 2020, 7:55 PM

#

Step 4

#

Steps 1-3 are completed. What a ride so far. I’ll be cruising easily once i complete step 4

still elm Apr 26, 2020, 7:57 PM

#

@white salmon try googling about the name you found

white salmon Apr 26, 2020, 7:59 PM

#

Ok thank you

#

May I DM?

long niche Apr 26, 2020, 9:10 PM

#

@white salmon hi paradox, is it you the writer of this room https://tryhackme.com/room/ccpentesting ?

TryHackMe

TryHackMe | CC: Pen Testing

A crash course on various topics in penetration testing

white salmon Apr 26, 2020, 9:10 PM

#

Indeed I am

long niche Apr 26, 2020, 9:11 PM

#

😄 hello friend

#

it's great room

#

i stack in section 14 question 3, i did lot of try

#

i discuss with Ninjajc01 | james

#

about it

#

i think there's typo

#

:/

#

blobheart

white salmon Apr 26, 2020, 9:13 PM

#

Typo!

#

Impossible!

#

It's actually very probable

#

Where's the typo

#

I'll fix it up

long niche Apr 26, 2020, 9:14 PM

#

How do you specify which rule to use?

#

question 3

#

in section 14

#

i use many answer to use rule based on john manual page

#

or --help

stuck fractal Apr 26, 2020, 9:20 PM

#

@white salmon I told you about it earlier

#

@white salmon Pars no posting answers

white salmon Apr 26, 2020, 9:22 PM

#

Haha @stuck fractal

#

Typo fixed

long niche Apr 26, 2020, 9:30 PM

#

@white salmon thank you it was fixed !

nimble wedge Apr 27, 2020, 12:17 AM

#

Stuck on #2 of Task 18 "What is the value of the home environment variable" for the $ operator

stuck fractal Apr 27, 2020, 12:21 AM

#

It's case sensitive

nimble wedge Apr 27, 2020, 12:21 AM

#

thought using "echo $HOME" would be the right but entering the output doesn't work

stuck fractal Apr 27, 2020, 12:21 AM

#

Are you the right user?

#

You might not be

nimble wedge Apr 27, 2020, 12:21 AM

#

ohhhhhhhhhhhhhhhhhhhhhhhhhh

#

Yup

#

Where does it say to switch to shiba2?

#

I missed that completely

stuck fractal Apr 27, 2020, 12:22 AM

#

Task 11

#

The entire point is switching user

nimble wedge Apr 27, 2020, 12:22 AM

#

dang

stuck fractal Apr 27, 2020, 12:22 AM

#

Technically task 12

#

Don't skip parts

nimble wedge Apr 27, 2020, 12:22 AM

#

I mean I got the password quickly too but didn't think to switch

#

yeah you're right

#

need to read more closely

#

thanks ya'll

drowsy needle Apr 27, 2020, 9:39 AM

#

I am at Common Linux Privesc at this moment , Exploiting PATH Variable -> "echo "[whatever command we want to run]" > [name of the executable we're imitating]" afaik it is echo ./usr/local/ > ls

#

anyone have a hint ? 😦

echo thunder Apr 27, 2020, 10:39 AM

#

anyone comleted the bookface challenge

#

?

peak girder Apr 27, 2020, 10:40 AM

#

@drowsy needle ./usr/local/ isn't really the command...

north moat Apr 27, 2020, 10:49 AM

#

Room introtonetworking Task 5 #3 i don't understand what mean https://tryhackme.com/room/introtonetworking

TryHackMe

TryHackMe | Hacking Training

An online platform for learning and teaching cyber security, all through your browser.

peak girder Apr 27, 2020, 10:55 AM

#

wireshark shows 5 pieces of data, one of these that links to the transport layer has a protocol specified, what is that protocol

#

(another hint: protocol is literally in the answer)

north moat Apr 27, 2020, 11:00 AM

#

you mean i must enter protocol name ? @peak girder

peak girder Apr 27, 2020, 11:01 AM

#

yeah.. the protocol they are searching for.. yeah 🙂

north moat Apr 27, 2020, 11:01 AM

#

can i DM ?

peak girder Apr 27, 2020, 11:02 AM

#

sure

white salmon Apr 27, 2020, 11:06 AM

#

I mean, if you understand what says above, its easy to answer

echo thunder Apr 27, 2020, 11:49 AM

#

anyone completed the jack challange

#

?

echo thunder Apr 27, 2020, 12:38 PM

#

can anyone give a hint on the wordlist in order to crack the password for the jack challange

#

?

#

the hint could be the first 3 letters

white salmon Apr 27, 2020, 12:43 PM

#

havent done it, doesnt work with rockyou?

echo thunder Apr 27, 2020, 12:44 PM

#

no

shrewd skiff Apr 27, 2020, 12:44 PM

#

@dark schooner Not sure why you want to add me but please ask your questions here if its HINTS you are looking for 🙂

white salmon Apr 27, 2020, 12:47 PM

#

try to look for a writeup, as i said i havent done it sorry

echo thunder Apr 27, 2020, 12:49 PM

#

there is no writeup

shrewd skiff Apr 27, 2020, 12:50 PM

#

@echo thunder is it this room: https://tryhackme.com/room/jack ?

TryHackMe

TryHackMe | Hacking Training

An online platform for learning and teaching cyber security, all through your browser.

#

@echo thunder ok so I assume thats the room. So um... rockyou.txt is good for many cases, but not always. Try different wordlists... Try the short ones too 🙂

#

If that is not the room then just ignore what i said 🥳

echo thunder Apr 27, 2020, 12:59 PM

#

@shrewd skiff it is the room with the personal blog

#

I've tried rockyou password list

shrewd skiff Apr 27, 2020, 12:59 PM

#

Yea try another one

#

thats my hint.

echo thunder Apr 27, 2020, 1:00 PM

#

in the seclists under password are a lot of them

shrewd skiff Apr 27, 2020, 1:00 PM

#

Yea i know

echo thunder Apr 27, 2020, 1:00 PM

#

it is in the short ones

#

?

shrewd skiff Apr 27, 2020, 1:01 PM

#

um that i dont know

#

i would totally try a shorter wordlist with more common passwords

echo thunder Apr 27, 2020, 1:01 PM

#

where can I ask something regarding kali linux

#

I have a glitch problem

shrewd skiff Apr 27, 2020, 1:02 PM

#

https://github.com/danielmiessler/SecLists/blob/master/Passwords/Common-Credentials/10-million-password-list-top-1000000.txt I dont know if the password is in there but its shorter

GitHub

danielmiessler/SecLists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, pas...

echo thunder Apr 27, 2020, 1:02 PM

#

when installed on the pc

shrewd skiff Apr 27, 2020, 1:02 PM

#

try "general"

echo thunder Apr 27, 2020, 1:02 PM

#

ok

drowsy needle Apr 27, 2020, 4:23 PM

#

@peak girder when you try one thousand times with ./bin/bash instead of echo "/bin/bash" ... dear lord... some things need to cool off before retrying it again 😂

stuck fractal Apr 27, 2020, 4:24 PM

#

That works if you're in / 😉

quartz dirge Apr 27, 2020, 4:36 PM

#

Hi, I have just started on the SQLi lab basic challenge. I am click on the image with various challenges. Im unclear as to what is required of me. THere are no instructions. The first 10 challenges are just static pages with no input boxes to exploit. So what i mean to be doing? SQL injection inside URLs or intercepting the request with burp suite and then injecting SQL. Some guidance would be helpful please. Thank you.

glossy basin Apr 27, 2020, 5:00 PM

#

@quartz dirge in first lessons you need to modify link to get the result

#

the room is just a port from github basically

#

proper SQLi room is being made now

peak girder Apr 27, 2020, 6:53 PM

#

Yes

#

Basicly

#

And a tiny bit of c#... It uses the "Api" of windows against itself

#

@quartz dirge you'd have more luck looking into the repo of that room... It's in github by the user audi-1

#

He even has a blog where he explains on what to do (link is in the repo)

turbid veldt Apr 27, 2020, 8:02 PM

#

Actually I shoul;d have posted here

#

repasting:

#

evening guys
doing "find room"
i am going mad here as I miss 2 search commands
can anyone help with this one:
Find all files with write permission for the group "others", regardless of any other permissions, with extension ".sh" (use symbolic format)
*
I am doing this:
find / -type f -group others -perm -g=w -name *.sh
not sure where I make the mistake

stuck fractal Apr 27, 2020, 8:09 PM

#

@turbid veldt that's the owners group

#

UGO

#

Delete spoiler

#

This is hints

#

You probably misread a character or two.

restive basalt Apr 27, 2020, 8:11 PM

#

I kinda tried all combinations.

stuck fractal Apr 27, 2020, 8:12 PM

#

It worked for me

restive basalt Apr 27, 2020, 8:12 PM

#

well I must be blind then lol. is the first letter upper or lower case

stuck fractal Apr 27, 2020, 8:13 PM

#

No idea

restive basalt Apr 27, 2020, 8:15 PM

#

ok it was upper. thanks anyways

summer snow Apr 27, 2020, 9:51 PM

#

@fierce bramble go through the help for msfconsole again it's in there. Maybe you're misunderstanding what it means by null. All you need is to clear a value or set it back to nothing...

tight escarp Apr 27, 2020, 10:26 PM

#

guys anyone who has done The Cod Caper and can give a hint about the hidden ssh password? I rooted the box but can't find that file. Im going insane

inland onyx Apr 27, 2020, 10:43 PM

#

Look for files belonging to other users @tight escarp

#

Not necessarily "real" users

tight escarp Apr 27, 2020, 10:44 PM

#

hmm okay

#

ty

tight escarp Apr 27, 2020, 11:08 PM

#

I think I found a way to break the machine lmao

proven bridge Apr 27, 2020, 11:39 PM

#

@tight escarp How so?

tight escarp Apr 27, 2020, 11:40 PM

#

nvm, it was just a coincidence. my vpn would crash exactly when i tried to execute a command on the machine

#

like 3 times in a row

white salmon Apr 27, 2020, 11:59 PM

#

lol

quartz dirge Apr 28, 2020, 9:41 AM

#

@glossy basin, @peak girder thanks very much for the guidance.....really appreciate the quick response and pointing me to github.

glossy basin Apr 28, 2020, 9:48 AM

#

Anytime, @quartz dirge :)

white salmon Apr 28, 2020, 10:41 AM

#

May someone give me a hint in brainpan? I'm kinda lost where to start, ||have scanned with nmap and port 10000 is a SimpleHTTPServer and I see like "x20"||

upper socket Apr 28, 2020, 12:06 PM

#

i need help in biohazrad room

limber flume Apr 28, 2020, 12:20 PM

#

||try enumerating that server for directories, remember this is a buffer overflow box so you should ultimately be looking for an exe to debug @white salmon||

white salmon Apr 28, 2020, 12:21 PM

#

finished it already, its almost as same as brainstorm :D

limber flume Apr 28, 2020, 12:22 PM

#

yes very similar ports and everything 🙂 feeling confident on buffer overflows just in time for my exam later tonight :b

white salmon Apr 28, 2020, 12:22 PM

#

which one?

limber flume Apr 28, 2020, 12:22 PM

#

The big boy, OSCP

white salmon Apr 28, 2020, 12:22 PM

#

ow

#

wish you good luck with it!

limber flume Apr 28, 2020, 12:22 PM

#

appreciate it! gonna be studying hard all day

white salmon Apr 28, 2020, 12:23 PM

#

also remember, gfuel is your friend

limber flume Apr 28, 2020, 12:23 PM

#

that a snack? lol

white salmon Apr 28, 2020, 12:24 PM

#

its an energy drink

#

some type of preworkout for gamers

#

we shouldnt actually talk here, lets go to #thm-community-media if you want :)

limber flume Apr 28, 2020, 12:25 PM

#

oh true

upper socket Apr 28, 2020, 12:35 PM

#

i need help in biohazrad room who is leader of stars brove team

upper socket Apr 28, 2020, 12:51 PM

#

i need help in this room: https://tryhackme.com/room/biohazard

TryHackMe

TryHackMe | Biohazard

A CTF room based on the old-time survival horror game, Resident Evil. Can you survive until the end?

echo thunder Apr 28, 2020, 1:34 PM

#

hi all

#

i have a question regarding smbmap

#

can anyone pm me please

#

?

#

https://tryhackme.com/room/ccpentesting

TryHackMe

TryHackMe | CC: Pen Testing

A crash course on various topics in penetration testing

#

task 20 question 9

#

anyone

#

?

sick sun Apr 28, 2020, 1:57 PM

#

anyone ?

patent token Apr 28, 2020, 1:58 PM

#

What have you tried so far @vague reef ?

sick sun Apr 28, 2020, 1:58 PM

#

know what is the answer of this question in || Lord Of The Root || || Hmmm, what method is used to reveal hidden ports? || ?

vague reef Apr 28, 2020, 1:59 PM

#

@patent token Hmmm? Related to what?

patent token Apr 28, 2020, 1:59 PM

#

Your question. What have you tried already?

#

The answer to that one is pretty simple @sick sun

sick sun Apr 28, 2020, 2:00 PM

#

i'm stuck in this question || Hmmm, what method is used to reveal hidden ports?||

patent token Apr 28, 2020, 2:00 PM

#

||Google nmap hidden ports||

sick sun Apr 28, 2020, 2:01 PM

#

@patent token i was try asnwer from google but nothing work

patent token Apr 28, 2020, 2:02 PM

#

||https://www.google.com/search?client=firefox-b-1-d&q=nmap+find+hidden+ports||

#

||2nd link||

sick sun Apr 28, 2020, 2:05 PM

#

@patent token no work

patent token Apr 28, 2020, 2:06 PM

#

I know it works because I've never done that machine before, joined it when you asked your question, and it's where I got the answer from. 🙂

sick sun Apr 28, 2020, 2:09 PM

#

@patent token oke man

patent token Apr 28, 2020, 2:10 PM

#

I promise you the answer to your question is located

#

||in the second link||

white salmon Apr 28, 2020, 2:44 PM

#

@sick sun literally the room tells you the answer

fresh walrus Apr 28, 2020, 2:53 PM

#

How would I find php version?

white salmon Apr 28, 2020, 2:54 PM

#

try with burp

fresh walrus Apr 28, 2020, 3:00 PM

#

Oh... Got it! Thanks @white salmon

sick sun Apr 28, 2020, 3:01 PM

#

@patent token oke man i try it

white salmon Apr 28, 2020, 3:01 PM

#

@sick sun read the room well, the answer is on it

still lintel Apr 28, 2020, 3:02 PM

#

@patent token can you help me with Buffer Overflow 1 please?

#

Buffer Overflow Room

patent token Apr 28, 2020, 3:04 PM

#

Which task? When you get to Task 8 it seems to be borked currently.

still lintel Apr 28, 2020, 3:04 PM

#

Task 8

#

😄

patent token Apr 28, 2020, 3:04 PM

#

Yea, I don't think it currently works.

still lintel Apr 28, 2020, 3:04 PM

#

im not too sure what to do...

echo thunder Apr 28, 2020, 3:04 PM

#

did anyone complete biohazard room

#

?

#

I have a question

#

on task 4 question 3

sick sun Apr 28, 2020, 3:06 PM

#

@white salmon oh man thanks i got it

jovial sundial Apr 28, 2020, 3:40 PM

#

I need an hint with Bonus Challenge - The True Ending
||I tried searching through /opt/ , /home using grep or sudo but i just don't know how to access it||

stuck fractal Apr 28, 2020, 3:41 PM

#

Look for files belonging to each and every user

tidal sedge Apr 28, 2020, 3:41 PM

#

^

jovial sundial Apr 28, 2020, 3:58 PM

#

thanks made it through

mellow vale Apr 28, 2020, 5:32 PM

#

I get stuck in Ghidra room

#

Task 4 #2

#

I have this one, but I don't know anything about C, so I can't see where is the variable

📎 unknown.png

glossy basin Apr 28, 2020, 5:42 PM

#

@mellow vale I hope you understand this hint, but the answer should be translated from Hex to decimal (the first value is hex)

#

I had a hard time on this question also, but this hint saved me back in the days ^

mellow vale Apr 28, 2020, 5:43 PM

#

damn, thanks mate, I got It

glossy basin Apr 28, 2020, 5:43 PM

#

anytime 🙂

summer snow Apr 28, 2020, 5:47 PM

#

how are you supposed to do that in cyberchef? I tried and it wasn't working. Did it separately in rapidtables and it was easy.

glossy basin Apr 28, 2020, 5:50 PM

#

@summer snow

📎 Screen_Shot_2020-04-28_at_20.49.33.png

summer snow Apr 28, 2020, 5:50 PM

#

oh wrong room thought it was the one that had a hint from dec to hex and from hex to ascii @glossy basin do you know what the recipe for that would look like?

glossy basin Apr 28, 2020, 5:51 PM

#

I mean, something similar to that ^

#

just use the search bar on the left

#

dec -> hex
hex -> ascii

#

something like that

summer snow Apr 28, 2020, 5:52 PM

#

oh think I know what I did wrong hold on going to experiment more, thanks

#

🤷 I can't get it to work aha it doesn't recognize the input as a decimal think it's because it exceeds the range of ints even unsigned_long_long so idk how i'm supposed to format it for the recipe but oh well just would've been cool as I've started to use cyberchef often

umbral storm Apr 28, 2020, 6:10 PM

#

Maybe it's a simple answer, but a get stuck and I don't know what is refered this: "How do we start entering text into our new Vim document?", on the Vim box, can someone give me a hint?

inland onyx Apr 28, 2020, 6:11 PM

#

Yeah, the question is a bit dim.
How do you normally enter text on a computer?

summer snow Apr 28, 2020, 6:14 PM

#

thought you were trolling then went to the room and sure enough the hint helped a lot :p

umbral storm Apr 28, 2020, 6:15 PM

#

Yeah, I got it, that was so unexpected 😂 , thanks

white salmon Apr 28, 2020, 6:16 PM

#

That question is actually stupid

stuck fractal Apr 28, 2020, 6:16 PM

#

I love that question

inland onyx Apr 28, 2020, 6:17 PM

#

It definitely makes people take a reality check...

summer snow Apr 28, 2020, 6:17 PM

#

don't know best channel to ask but my strategy has mainly been go through as many easy rooms as I can and then start working on medium and then eventually hard I did all the complete beginner and 80% of BP/RP paths but is this strategy sound or is it better to stay within particular areas instead of jumping around etc

white salmon Apr 28, 2020, 6:18 PM

#

It's a hilarious question

#

It's not a good question

stuck fractal Apr 28, 2020, 6:18 PM

#

Just because it shows how simple VIM is...

white salmon Apr 28, 2020, 6:18 PM

#

simple
VIM

#

Pick one

inland onyx Apr 28, 2020, 6:19 PM

#

Vim is simple

#

Vim is gorgeous

#

Vim is love

#

Vim is life

#

Deal with it

#

sudo vim > * && sudo passwd

tidal sedge Apr 28, 2020, 6:25 PM

#

🇻 🇮 🇲

patent token Apr 28, 2020, 6:49 PM

#

nano > all

summer snow Apr 28, 2020, 6:49 PM

#

talking about vim can anyone give me a hint for "How do we save and quit, for all active tabs?" Tried all the ones I can think of and googled and nothing seems to work.

#

in task 3 of vim room

#

oh ignore me for some reason enter on keyboard wasn't working as an alternative to check for correct answer so I wasn't actually doing anything xD clicking it marked it correct

nocturne vault Apr 28, 2020, 7:21 PM

#

hey, could I get a nudge with catdog?

#

got lfi working, not sure what files to look for..

white salmon Apr 28, 2020, 7:30 PM

#

There are lots of things you can do with lfi @nocturne vault

#

There's a method available that requires some research to figure out

#

Just keep trying things

nocturne vault Apr 28, 2020, 7:31 PM

#

if you're talking about php wrappers I've done that already

#

hmm, gonna keep looking into it

white salmon Apr 28, 2020, 7:32 PM

#

Nope not that

nocturne vault Apr 28, 2020, 7:46 PM

#

okay i think i got it thnx

graceful nacelle Apr 28, 2020, 8:12 PM

#

This challenge is pretty simple. The binary is checking to see if the environment variable "test1234" exists, and if it's set equal to the current $USER environment variable.

stuck fractal Apr 28, 2020, 8:12 PM

#

Create the variable, set it to the correct value, run the binary

patent token Apr 28, 2020, 9:49 PM

#

Hey there. I'm trying to run through the ZAP room and having issues getting the Vulnerability GET:Brute login parameters to show so I can attempt to brute force them.

I've logged in to DVWA, grabbed my session cookie, set it as active, uploaded my directory list, and ran again, but I'm not getting anything that I can try to fuzz. Any ideas?

#

📎 unknown.png

stuck fractal Apr 28, 2020, 9:50 PM

#

Is it http basic auth?

patent token Apr 28, 2020, 9:51 PM

#

I believe so

#

I don't have much experience with ZAP, and kinda stink at web app in general, so trying to follow the guide pretty closely. I've restarted ZAP a few times and gone back through my steps but been unsuccessful in grabbing what is shown so that I can fuzz it.

stuck fractal Apr 28, 2020, 9:52 PM

#

Did you use a login form for it?

#

On page one, not a popup browser one

patent token Apr 28, 2020, 9:53 PM

#

I logged in via DVWA's login portal, and snagged the PHPSession cookie that we needed.

#

On page, not popup correct.

stuck fractal Apr 28, 2020, 9:53 PM

#

So that'll be POST

patent token Apr 28, 2020, 9:53 PM

#

That's what I thought as well.

#

But the guide isn't written that way.

#

📎 unknown.png

stuck fractal Apr 28, 2020, 9:54 PM

#

Oh wait

glossy basin Apr 28, 2020, 9:54 PM

#

Yeah, i also was curious about that one

patent token Apr 28, 2020, 9:54 PM

#

Either way, I'm not pulling a POST either.

stuck fractal Apr 28, 2020, 9:54 PM

#

This is a page on DVWA for brute

glossy basin Apr 28, 2020, 9:54 PM

#

ended up with POST

stuck fractal Apr 28, 2020, 9:54 PM

#

The post request for login is shown in the question

#

Lemme just take a look real quick

#

@white salmon ❤️ nice shoutout

summer snow Apr 28, 2020, 10:02 PM

#

pretty sure it was a get and it worked for me problem for me was getting the hunt.py to load i cloned and it doesn't show up in scripts not sure if I was supposed to save somewhere in particular or not don't think guide mentioned that

stuck fractal Apr 28, 2020, 10:07 PM

#

Ok I can confirm it should be a GET

#

Waiting for the server to stop dieing

patent token Apr 28, 2020, 10:08 PM

#

So what did you do that I'm not I guess.

stuck fractal Apr 28, 2020, 10:08 PM

#

Well first things first I need to turn the security down

patent token Apr 28, 2020, 10:08 PM

#

I did that

stuck fractal Apr 28, 2020, 10:09 PM

#

What's the issue?

#

Oh

#

You need to actually try to login in first

patent token Apr 28, 2020, 10:10 PM

#

I'm not getting the GET parameters shown in the walkthrough.

stuck fractal Apr 28, 2020, 10:10 PM

#

When you have the proxy set up

patent token Apr 28, 2020, 10:10 PM

#

I have logged in

#

Every time.

stuck fractal Apr 28, 2020, 10:10 PM

#

No, to that form

#

Not the DVWA login, the brute force params login

patent token Apr 28, 2020, 10:11 PM

#

doh

#

I need to read better.

#

Thank you.

stuck fractal Apr 28, 2020, 10:11 PM

#

Time to finish doing this room myself

patent token Apr 28, 2020, 10:11 PM

#

My eyes start wandering when the words are so close to the pictures I suppose. Silly me. Thanks for the help.

#

🙂

flat kite Apr 29, 2020, 1:20 AM

#

i found url by solving it.but it is not the 😩 key give me a hint

📎 ss.png

stuck fractal Apr 29, 2020, 1:21 AM

#

Then go to the URL

flat kite Apr 29, 2020, 1:24 AM

#

thanks bro @stuck fractal

stuck fractal Apr 29, 2020, 1:24 AM

#

It's the next logical step

#

I'm not your bro btw

hidden sand Apr 29, 2020, 1:32 AM

#

Lol

echo thunder Apr 29, 2020, 9:22 AM

#

did anyone complete bookface challenge

#

?

rancid crystal Apr 29, 2020, 9:27 AM

#

https://discordapp.com/channels/521382216299839518/521771811768107008/704832425410298008

mint turtle Apr 29, 2020, 10:33 AM

#

📎 unknown.png

#

Im trying with|| echo /bin/bash > ls||, can someone help me?

wooden mist Apr 29, 2020, 10:38 AM

#

look at the task

#

specifically at the parameter to echo

mint turtle Apr 29, 2020, 10:44 AM

#

I don't get it

wooden mist Apr 29, 2020, 10:49 AM

#

in the task you have echo "command to run" > outputFile

#

maybe try to wrap /bin/bash in quotes?

echo thunder Apr 29, 2020, 10:50 AM

#

anyone completed bookface?

mint turtle Apr 29, 2020, 10:54 AM

#

@wooden mist Okey I did it, but why are the quotes necessary?

wooden mist Apr 29, 2020, 10:55 AM

#

it's to keep the command intact in case you want to have spaces or any other special character in it

echo thunder Apr 29, 2020, 11:16 AM

#

Who need help for jack personal website pm me and I will help you

graceful nacelle Apr 29, 2020, 12:49 PM

#

@stuck fractal just wanna say i completely overthought the question and it was increcbly easy.

shadow basin Apr 29, 2020, 1:47 PM

#

" it will be checking that there's a directory called test in your home directory, how you create that is up to you. " Room "Learn Linux" task 33. I dont have the permission to create anything at directory '/home'. I have to escaleta privileges?

inland onyx Apr 29, 2020, 1:52 PM

#

Your home directory, not the home directory

shadow basin Apr 29, 2020, 1:55 PM

#

ahhh thanks, I guess I got used to the fact that '/home' directory is 'My'.

graceful nacelle Apr 29, 2020, 2:05 PM

#

task 25 What flag allows you to operate on every file in the directory at once? I dont see a single flag in the --help ls that would do this nor has he gone over that there is a flag that does this? wiki doesnt seem to have an amazing definion of flags either.

tidal sedge Apr 29, 2020, 2:06 PM

#

@graceful nacelle Which room is this?

rapid iron Apr 29, 2020, 2:10 PM

#

On RP: PS Empire, Task 3 Question 7, "In addition to changing our browser profile, we can change what our server appears as. What option can we set to change this?" the answer it appears it should be is not accepted. Can you DM me plz @minor bough

graceful nacelle Apr 29, 2020, 2:10 PM

#

@tidal sedge learnig linux

tidal sedge Apr 29, 2020, 2:11 PM

#

@graceful nacelle man chown

shadow basin Apr 29, 2020, 2:19 PM

#

I have created the home directory||, have made directory '/home/shiba3/home/test' , file '/home/shiba3/home/test/test1234'. Found the binary 'shiba4' executing it, and I cant get the password what am I doing wrong?|| Room : Learning Linux

📎 pic-selected-200429-1515-02.png

summer snow Apr 29, 2020, 2:24 PM

#

@rapid iron what do you mean? re-read what it's asking for. I just checked and the correct answer is accepted just fine

rapid iron Apr 29, 2020, 2:26 PM

#

@summer snow this "server appears as" seems to be the key words to me. If that is the case, then the option h*****s would be correct as what it currently shows is exactly that. As it would seem that is not the case, I am not sure what I am missing

#

I git cloned the exact repo and installed so should see the correct options for the listener. Here is a screenshot of my options for it

#

📎 unknown.png

summer snow Apr 29, 2020, 2:31 PM

#

odd I see why you are confused check the hint or try a different version. I'm running 2.3.0

#

@rapid iron

rapid iron Apr 29, 2020, 2:32 PM

#

@summer snow so I have that rare issue mentioned in the hint

#

I am running 3.2.0

summer snow Apr 29, 2020, 2:32 PM

#

indeed, seems like it may have been renamed in the latest version? if that's the case more info should be added to the room

rapid iron Apr 29, 2020, 2:34 PM

#

@summer snow seems that may be the case, if H*****s is the new one, what was the old one? Cannot finish it and the changelogs for the git repo doesn't show it and could not find 2.3.0 info yet

summer snow Apr 29, 2020, 2:44 PM

#

check history and you'll see it if you search far enough @rapid iron

rapid iron Apr 29, 2020, 2:44 PM

#

Appreciate it @summer snow

still elm Apr 29, 2020, 2:54 PM

#

I have created the home directory||, have made directory '/home/shiba3/home/test' , file '/home/shiba3/home/test/test1234'. Found the binary 'shiba4' executing it, and I cant get the password what am I doing wrong?|| Room : Learning Linux
@shadow basin ||to many home||

shadow basin Apr 29, 2020, 2:56 PM

#

@still elm yeah but I dont have access to create anything at '/home'. Do I have to escalate privilages?

still elm Apr 29, 2020, 2:59 PM

#

no, your home directory is shiba3 (full path: /home/shiba3), think about this and read again the task

shadow basin Apr 29, 2020, 3:01 PM

#

@still elm thank you so much.

still elm Apr 29, 2020, 3:01 PM

#

np

white salmon Apr 29, 2020, 3:10 PM

#

Hey there 🙂 I am currently working on the linux challenges and try to get flag 29. Well, to be precise, i found it already, but I feel like not having properly solved step 3 "Split by comma and get the last element in the split." for that flag. I removed the spaces and new lines in the file but i don't know what command to use for the "splitting and displaying the last element"-part. Might someone point me in a direction for that? :3

still elm Apr 29, 2020, 3:17 PM

#

@white salmon try searching a shell command that deals great with strings, replacements, etc... or if you know how to code in python, you can create your own script

white salmon Apr 29, 2020, 3:24 PM

#

@still elm soooo, ||sed|| looks interesting?

shadow basin Apr 29, 2020, 3:29 PM

#

Room Learn Linux, Task 43: || It asks to read the flag, "/root/root.txt", I have acess to 4 users and none of them are sudoers || no idea where to look, can someone please give a hint where to start?

stuck fractal Apr 29, 2020, 3:38 PM

#

@shadow basin look for files belonging to each and every user.

patent jacinth Apr 29, 2020, 6:05 PM

#

Hi people. A bit stuck on the reverse shell in the metasploit room. I'm getting this message and no sessions when I upload the file.
[] Exploit running as background job 0.
[] Exploit completed, but no session was created.
msf5 exploit(multi/handler) >
[*] Started reverse TCP handler on 10.9.2.21:1337
sessions -l

Active sessions

sand glen · 2020-04-25T05:28:04.553Z

#room-hints | TryHackMe | Page 22

No active sessions.

stuck fractal Apr 29, 2020, 6:05 PM

#

Which task?

patent jacinth Apr 29, 2020, 6:06 PM

#

task 5 in gaining access

#

https://www.tryhackme.com/room/metasploit

TryHackMe

TryHackMe | Hacking Training

An online platform for learning and teaching cyber security, all through your browser.

#

in the beginner metaplot room

stuck fractal Apr 29, 2020, 6:07 PM

#

I think you missed a step.

#

After uploading it.

patent jacinth Apr 29, 2020, 6:07 PM

#

yeh

stuck fractal Apr 29, 2020, 6:07 PM

#

It won't just run it, you have to get it to run.

patent jacinth Apr 29, 2020, 6:08 PM

#

so I have to go to /shell.php

#

right

#

boom, we're in

#

thanks a lot @stuck fractal

sharp bolt Apr 29, 2020, 7:15 PM

#

What is the logic behind flag26 of linux ctf, if someone can DM me an explanation. I looked at the solution but still i don't understand what's going on and how i woul have been supposed to guess

white salmon Apr 29, 2020, 7:23 PM

#

Hi, new to this site - once connected to a room how do i know what the server IP is to complete the tutorials?

stuck fractal Apr 29, 2020, 7:25 PM

#

@white salmon I don't understand your question

#

What do you mean by "connected to a room"?

white salmon Apr 29, 2020, 7:26 PM

#

@stuck fractal DM?

stuck fractal Apr 29, 2020, 7:26 PM

#

No.

#

No need.

white salmon Apr 29, 2020, 7:27 PM

#

ok - im doing the Learn Linux Room - Task 11 references a challenge that requires i execute a binary to retrieve a pwd ?

stuck fractal Apr 29, 2020, 7:28 PM

#

Yes.

white salmon Apr 29, 2020, 7:28 PM

#

where do i get the binary from if i can connect to the server

#

cannot*

stuck fractal Apr 29, 2020, 7:30 PM

#

Ok, so you didn't answer my question

#

You said "once connected to a room"

#

What did you mean?

white salmon Apr 29, 2020, 7:30 PM

#

i see, once a room is deployed

stuck fractal Apr 29, 2020, 7:31 PM

#

Ok, I'm going to correct some terminology so this is less confusing for everyone

#

A room is the web page, with the tasks

#

Tasks can have a VM or some resources attached to them

#

When you click deploy, you are deploying a VM.

white salmon Apr 29, 2020, 7:31 PM

#

if i said joined ?

stuck fractal Apr 29, 2020, 7:32 PM

#

Joining a room adds it to My Rooms and allows you to deploy VMs and answer questions.

white salmon Apr 29, 2020, 7:33 PM

#

ok, have not found a room that has requested that yet.

stuck fractal Apr 29, 2020, 7:34 PM

#

Huh?

white salmon Apr 29, 2020, 7:34 PM

#

so i have joined a room and a task is referring to a binary i should execute - how do i gain access to this file

stuck fractal Apr 29, 2020, 7:34 PM

#

You skipped over part of the room.

#

Start from the beginning.

white salmon Apr 29, 2020, 7:35 PM

#

ok, will review the previous tasks.

stuck fractal Apr 29, 2020, 7:35 PM

#

Start from task 1

white salmon Apr 29, 2020, 7:35 PM

#

i have

#

hold that

#

i missed the deploy button on the side ... hand-palm-face

#

apologies

stuck fractal Apr 29, 2020, 7:36 PM

#

Don't skip over parts of the room

white salmon Apr 29, 2020, 7:38 PM

#

i did not - just didnt read the full task

stuck fractal Apr 29, 2020, 7:38 PM

#

That's a part

white salmon Apr 29, 2020, 7:38 PM

#

lol - ok then

shadow basin Apr 29, 2020, 8:55 PM

#

Can someone rephraze the question for me please, I have no idea what is asked over here.

📎 unknown.png

#

Task 11, room: "Advent of Cyber".

stuck fractal Apr 29, 2020, 8:56 PM

#

Someone leaked data using DNS requests

#

What was that data?

shadow basin Apr 29, 2020, 8:57 PM

#

omg I still dont get it

#

can you suggest wrong alternatives pls?

stuck fractal Apr 29, 2020, 9:00 PM

#

DNS is a system that turns addresses like "tryhackme.com" into IP addresses

#

Look at the DNS requests

#

Find suspicious ones

shadow basin Apr 29, 2020, 9:02 PM

#

all of them are suspicious for me. 😄

stuck fractal Apr 29, 2020, 9:02 PM

#

Some are weird.

shadow basin Apr 29, 2020, 9:02 PM

#

ok thanks will be keep digging

shadow basin Apr 29, 2020, 9:23 PM

#

@stuck fractal i have found the data, recovered it cracked it. But I just dont get what sort of ansver can be expected in 5 words .

#

and in two writeups no any clues, I guess I am missing something

stuck fractal Apr 29, 2020, 9:27 PM

#

DM me the data you retrieved

shadow basin Apr 29, 2020, 9:27 PM

#

I done next two questions.

#

correct answers was accepted

shadow basin Apr 29, 2020, 10:00 PM

#

@stuck fractal omg I did finaly found it. Thank you so much for a hint.

stuck fractal Apr 29, 2020, 10:00 PM

#

Get familiar with wireshark

shadow basin Apr 29, 2020, 10:00 PM

#

yeah will do

graceful nacelle Apr 29, 2020, 10:08 PM

#

task 33 Learn Linux: Its telling me to run a binary on shiba4. Why run a binary when i dont have permison to any of the folders?

strange basin Apr 29, 2020, 10:10 PM

#

try to find the binary 🙂

white salmon Apr 29, 2020, 10:10 PM

#

asks you to find it

graceful nacelle Apr 29, 2020, 10:15 PM

#

by finding it im supoose to create directories inside each other and that somehow gives me access to test files

strange basin Apr 29, 2020, 10:16 PM

#

what's the task prompt again?

stuck fractal Apr 29, 2020, 10:16 PM

#

huh?

white salmon Apr 29, 2020, 10:16 PM

#

it asks you to find a file whose name is shiba4

#

@graceful nacelle

strange basin Apr 29, 2020, 10:16 PM

#

have you found the file?

#

hint: maybe there are multiple files named shiba4

graceful nacelle Apr 29, 2020, 10:24 PM

#

yeaaah no. i was thinking i make a binary leading the test1234 files run it and somehting will happen that leads to shiba4

strange basin Apr 29, 2020, 10:28 PM

#

well that's the right approach yes

stuck fractal Apr 29, 2020, 10:28 PM

#

You don't make a binary tho

white salmon Apr 29, 2020, 10:29 PM

#

@graceful nacelle i gave you the hint, try to read it :)

summer snow Apr 29, 2020, 11:05 PM

#

why'd you create a 'Home' directory when you were already in the home directory

graceful nacelle Apr 29, 2020, 11:06 PM

#

wasnt paying attnetion and decided to roll with it

#

could that effect the results? that path lead the file

summer snow Apr 29, 2020, 11:08 PM

#

yes... guessing the binary is a compiled program that is looking for the existence of a file with an absolute path leading to the file it wants. You can't just put it in a different directory and expect it to work. Someone correct me if i'm wrong or talking about a different room here.

willow isle Apr 30, 2020, 12:51 AM

#

I'm in https://tryhackme.com/room/thecodcaper Task 5. LinEnum return an error message: '''Syntax error: newline unexpected''' from line 8, but when I check the "script it's a commented line. Any advise to give ?

TryHackMe

TryHackMe | The Cod Caper

A guided room taking you through infiltrating and exploiting a Linux system.

stuck fractal Apr 30, 2020, 12:52 AM

#

Did you download it right?

willow isle Apr 30, 2020, 12:53 AM

#

Yup I think so, used wget to get it and chmod it, eveeything should be ok ...

stuck fractal Apr 30, 2020, 12:54 AM

#

Did you wget from raw.github?

willow isle Apr 30, 2020, 12:55 AM

#

Nope i don't think so, got it from regular github page not raw one

steady stratus Apr 30, 2020, 12:55 AM

#

That'll be it 🙂

#

not to hijack

#

you need to wget the raw contents of the file

#

📎 unknown.png

#

then copy that URL :^^

willow isle Apr 30, 2020, 12:58 AM

#

All righ thx, gonna try. Yet, I don't get why it must be so

summer snow Apr 30, 2020, 12:58 AM

#

upside to that rather than having it locally,spinning simple server and getting it that way?

steady stratus Apr 30, 2020, 12:58 AM

#

:^

willow isle Apr 30, 2020, 1:00 AM

#

I spawn a simple server on my side to get it after i downloaded it from github

#

That's what i did, didn't know i had to get raw one

stuck fractal Apr 30, 2020, 1:02 AM

#

@willow isle If you wget the page, it doesn't give you the file. It gives you the HTML page that your browser would render.

#

raw.github.com serves the raw files

willow isle Apr 30, 2020, 1:04 AM

#

Aww yeah that's right ! Did not remember this

#

Am i right saying that curl would have done the job ?

#

Just to know

stuck fractal Apr 30, 2020, 1:06 AM

#

@willow isle Curl would have given you the HTML too

#

That web address will serve you the HTML no matter how you access it

willow isle Apr 30, 2020, 1:07 AM

#

Ok, thx.

#

Is there a difference between those tools ?

stuck fractal Apr 30, 2020, 1:10 AM

#

Google it

willow isle Apr 30, 2020, 1:10 AM

#

That's what i was about to say ^^ thx

graceful nacelle Apr 30, 2020, 1:24 AM

#

is the website down for everyone else?

stuck fractal Apr 30, 2020, 1:24 AM

#

Yes.

sick sun Apr 30, 2020, 3:04 AM

#

anyone give me a hint privs esc on securitay ? thanks

inland onyx Apr 30, 2020, 3:05 AM

#

Securitay?

#

That's a conference

stuck fractal Apr 30, 2020, 3:06 AM

#

@inland onyx It's a room as well

#

I wonder, it might be yours

#

But seeing as we can't search for that room, we're kinda stuck @sick sun

inland onyx Apr 30, 2020, 3:06 AM

#

Yeah, that's what I was thinking 😆

stuck fractal Apr 30, 2020, 3:07 AM

#

I imagine JOAT

inland onyx Apr 30, 2020, 3:08 AM

#

Mhm

sick sun Apr 30, 2020, 3:11 AM

#

sorry man i mean Jack-of-All-Trades

#

😄

inland onyx Apr 30, 2020, 3:12 AM

#

What are you stuck at @sick sun?

sick sun Apr 30, 2020, 3:12 AM

#

privs esc

#

@inland onyx can i PM you

#

?

stuck fractal Apr 30, 2020, 3:12 AM

#

We try to keep it out of DMs where we can here

sick sun Apr 30, 2020, 3:13 AM

#

@stuck fractal oke man sorry

inland onyx Apr 30, 2020, 3:14 AM

#

Mhm -- what James said, although you're welcome to ask here if you want a hint, or #room-help if you want help with it

sick sun Apr 30, 2020, 3:15 AM

#

@inland onyx oke man

uncut bolt Apr 30, 2020, 4:00 AM

#

I know I'm late to the game here but I'm stuck on Cyber Advent day 5 Question 4. I've searched through the hints here and it looks like others have figured it out. I've used the archive and found the correct number of time to go back but it still won't accept the date. Any advice?

stuck fractal Apr 30, 2020, 4:03 AM

#

@uncut bolt So you went back that far, did you do the maths to work out the actual answer?

uncut bolt Apr 30, 2020, 4:04 AM

#

@stuck fractal Yes, that's why I'm confused. I don't want to go and say what I've tried to not ruin it for anyone else

stuck fractal Apr 30, 2020, 4:04 AM

#

DM me your answer

dense marlin Apr 30, 2020, 4:39 AM

#

hey there

#

can i get some help for tmux room?

#22 Now that's we've finished out work, what can we type to close the session?

#

arent that we used tmux kill-session -t 0 to kill the session?

stuck fractal Apr 30, 2020, 4:40 AM

#

From your own command line

#

And don't kill things, it's bad

dense marlin Apr 30, 2020, 4:41 AM

#

omg my bad....

#

i thought it's one of the commands from tmux

stuck fractal Apr 30, 2020, 4:42 AM

#

Don't post answers, please.

dense marlin Apr 30, 2020, 4:43 AM

#

omg my bad

prisma blade Apr 30, 2020, 5:10 AM

#

Hey everyone ,, can anyone give me hint with hacker note task3

stuck fractal Apr 30, 2020, 5:15 AM

#

@prisma blade I don't know how anyone can give a hint for that.

#

Either write a script, use burp with an extension, or use the prewritten exploits

#

By using the python exploit, you waive the right to complain about the speed

#

Same with burp unless you have pro

prisma blade Apr 30, 2020, 5:16 AM

#

Thanks I will try my best I saw the hint but I didn’t understand

stuck fractal Apr 30, 2020, 5:17 AM

#

Which question number?

prisma blade Apr 30, 2020, 5:17 AM

#

3

stuck fractal Apr 30, 2020, 5:17 AM

#

I assume q1.

#

You said task 3

#

Do you mean task 3 question 3?

prisma blade Apr 30, 2020, 5:17 AM

#

Yes

stuck fractal Apr 30, 2020, 5:17 AM

#

If you wrote an exploit, run it

#

If you didn't. Write one, find one or use burp

prisma blade Apr 30, 2020, 5:18 AM

#

I have seen the one on ninja github

stuck fractal Apr 30, 2020, 5:18 AM

#

The golang exploit is the fastest

prisma blade Apr 30, 2020, 5:18 AM

#

But how can I run it from my terminal I mean

stuck fractal Apr 30, 2020, 5:18 AM

#

Google.

#

Read it, find what you need to change

#

If it's Go, you need to compile it.

prisma blade Apr 30, 2020, 5:19 AM

#

Is it like python <name>

stuck fractal Apr 30, 2020, 5:19 AM

#

how to run python code

prisma blade Apr 30, 2020, 5:19 AM

#

Okay thanks

#

Got it

echo thunder Apr 30, 2020, 6:04 AM

#

did anyone complete Cross-site Scripting challange

#

?

#

I have a question

#

on task 5 question 2 I've managed to change the background to red

#

but there is no flag

tawdry dove Apr 30, 2020, 6:06 AM

#

Good morning. So I am at dogcat room last flag. I am root but I can see I am some kind of jail. Possibly docker. Do you know some good related materials? I don't know much on the subject

shrewd skiff Apr 30, 2020, 6:17 AM

#

@tawdry dove https://gtfobins.github.io/ try look here. It might give you a clue or ideas. I dont know your room but i do know docker 🙂

tawdry dove Apr 30, 2020, 7:09 AM

#

Thanks @shrewd skiff .

dense marlin Apr 30, 2020, 9:19 AM

#

@tawdry dove try look out anything related to date

mental osprey Apr 30, 2020, 10:08 AM

#

What's up peeps 🙂

Quick question... Anybody have some tips and tricks for locating difficult flags?
Common locations, searching methods, find ticks, grep tricks, etc...

I'd really appreciate it ❤️

still elm Apr 30, 2020, 10:38 AM

#

@mental osprey i think that this could be one of your best shots https://tryhackme.com/room/thefindcommand

TryHackMe

TryHackMe | The find command

A learn-by-doing approach to the find command

dark schooner Apr 30, 2020, 10:48 AM

#

@still elm Thanks for the info, I too was wondering how to locate flags easily 😀 😀 😀

#

@mental osprey Good question dude 🤩 🤩 🤩

mental osprey Apr 30, 2020, 10:58 AM

#

@still elm I appreciate the advice but I've exhausted find commands :P
I did this room a while back

past night Apr 30, 2020, 11:36 AM

#

that's cheeky and not nice ^^

rancid crystal Apr 30, 2020, 11:37 AM

#

but it works, soo xD

past night Apr 30, 2020, 11:37 AM

#

it defeats the point of the room ^^

rancid crystal Apr 30, 2020, 11:37 AM

#

well even this not works 100% of the time

#

should i delete this then?

past night Apr 30, 2020, 11:38 AM

#

up to you, i would say yes

shadow basin Apr 30, 2020, 12:30 PM

#

📎 unknown.png

#

.. possibilities enabled by "-exec" is beyond the scope of this tutorial. Can anyone suggest a good place where I can find more info about it?

#

related to privilege escalation

inland onyx Apr 30, 2020, 12:34 PM

#

@shadow basin that's covered in the Advent of Cyber

shadow basin Apr 30, 2020, 12:38 PM

#

@inland onyx Thanks, if you mean Task 13 then thats what I am doing now. But would love to have more in depth reed about "-exec" specially related to *escalation. Thought maybe someone can suggest a good read.

inland onyx Apr 30, 2020, 12:40 PM

#

I doubt anyone's covered it in that much depth -- it's just one method. There's probably a gtfobins page on it. Realistically, all you need to bear in mind is that -exec lets you execute a command on the files that you find. Like, for example /bin/sh

shadow basin Apr 30, 2020, 1:13 PM

#

📎 unknown.png

#

why outcome is 'igor' if file is owned by 'holly'

past night Apr 30, 2020, 1:15 PM

#

because you execute your command on that file

shadow basin Apr 30, 2020, 1:15 PM

#

yeah but I am 'holly'

past night Apr 30, 2020, 1:15 PM

#

yeah, have you heard of suid/guid

shadow basin Apr 30, 2020, 1:16 PM

#

nop I am 'new' 😄

past night Apr 30, 2020, 1:16 PM

#

yeah, do some reading on that. you will understand

shadow basin Apr 30, 2020, 1:16 PM

#

thanks

past night Apr 30, 2020, 1:17 PM

#

no problemo

white salmon Apr 30, 2020, 1:42 PM

#

Anyone for Jack? Need a hint please

summer snow Apr 30, 2020, 1:43 PM

#

wait I don't get it there are no suid/guid bits in the permission for the file though @past night

past night Apr 30, 2020, 1:44 PM

#

is it not?

summer snow Apr 30, 2020, 1:46 PM

#

would it not be something like -rws if that were the case? idk haven't done the room/task but I don't think it's suid related but then again not an expert aha

past night Apr 30, 2020, 1:48 PM

#

if it managed to run the command under the context of a different user i would assume so

shadow basin Apr 30, 2020, 1:48 PM

#

it is suid related

past night Apr 30, 2020, 1:48 PM

#

hehe, i was right

shadow basin Apr 30, 2020, 1:49 PM

#

I managed to run command as another user because /usr/bin/find was belonging to another user

#

if it wouldnt be so, that wouldnt be the case

#

📎 unknown.png

#

hope it is not considered a spoiling

summer snow Apr 30, 2020, 1:52 PM

#

oh that's because you're running find as igor not the file you could've created your own file as holly ran find <your-file> -exec whoami \; and gotten an output of igor

shadow basin Apr 30, 2020, 1:54 PM

#

📎 unknown.png

#

@summer snow note the "s" letter on '/usr/bin/find' , thats called sticky bit

#

it lets you run the file as the user i guess

summer snow Apr 30, 2020, 1:56 PM

#

yea that's what I'm saying the file_owned_by_holly has nothing to do with it. It's just a random file with 664 permissions and could be replaced with any file to get the same effect.

shadow basin Apr 30, 2020, 1:57 PM

#

yes

#

however i havent figured out how to run the bash of 'igor'

#

somehow on every command works this way

summer snow Apr 30, 2020, 1:58 PM

#

gtfobins is my go to for finding more about stuff like this

shadow basin Apr 30, 2020, 1:58 PM

#

what is 'gtfobins'

summer snow Apr 30, 2020, 1:58 PM

#

google

shadow basin Apr 30, 2020, 1:59 PM

#

https://gtfobins.github.io/

#

thanks alot for the hint

warm sierra Apr 30, 2020, 2:11 PM

#

can someone tell me whats the incident of the photo in agent sudo /

solid patrol Apr 30, 2020, 2:53 PM

#

use reverse image search

warm sierra Apr 30, 2020, 3:11 PM

#

i cant seem to find anything @solid patrol

solid patrol Apr 30, 2020, 3:12 PM

#

i found it using yandex

warm sierra Apr 30, 2020, 3:14 PM

#

@solid patrol just to be sure i need to search the green cute alien image right ?

solid patrol Apr 30, 2020, 3:24 PM

#

i dont think that is the image

solid pollen Apr 30, 2020, 5:06 PM

#

Hey can someone give me a hint to priv esc in Ignite?

glossy basin Apr 30, 2020, 5:07 PM

#

i'll check and hint

solid pollen Apr 30, 2020, 5:07 PM

#

Ok

glossy basin Apr 30, 2020, 5:08 PM

#

On the main page check the Step 2 about database configuration

#

there's a hint on how to get some sensitive info

solid pollen Apr 30, 2020, 5:10 PM

#

On the main page check the Step 2 about database configuration
@glossy basin Ok, thank u so much✌️

glossy basin Apr 30, 2020, 5:10 PM

#

Anytime, if you have any further questions feel free to ask 😄

solid pollen Apr 30, 2020, 5:11 PM

#

Ya sure😇

viral crane Apr 30, 2020, 5:15 PM

#

Lmao, for the room BP: Volatility, if you just put the file in your windows computer, Win defender will give you the last answer (:

#

I got stuck searching and uploading thing.. and then windows told me I had a virus kek

nocturne vault Apr 30, 2020, 7:39 PM

#

getting headache from privesc jackinthebox, nudge in the right direction pl0x

stuck fractal Apr 30, 2020, 7:40 PM

#

That's not a room

#

I assume you mean Jack Of All Trades?

graceful nacelle Apr 30, 2020, 7:41 PM

#

$ find / -type d -name 'exploits' whats going wrong th this?

stuck fractal Apr 30, 2020, 7:43 PM

#

What are you trying to do?

#

And what's not happening?

graceful nacelle Apr 30, 2020, 7:43 PM

#

im searching for all directorys whose name is direcotry

#

lol exploits

stuck fractal Apr 30, 2020, 7:44 PM

#

So what's happening that makes you think it's going wrong?

graceful nacelle Apr 30, 2020, 7:45 PM

#

im taking a find course and this is one of the questions

nocturne vault Apr 30, 2020, 7:45 PM

#

yea i mean jack of all trades sry 🙂

graceful nacelle Apr 30, 2020, 7:45 PM

#

"find"

stuck fractal Apr 30, 2020, 7:45 PM

#

@graceful nacelle Maybe quote mark types

graceful nacelle Apr 30, 2020, 7:46 PM

#

ive tried them all

#

Find all directories whose name contains the word "exploits"

stuck fractal Apr 30, 2020, 7:47 PM

#

Ah

#

You're not quite doing that

#

@nocturne vault This channel is for hints

nocturne vault Apr 30, 2020, 7:47 PM

#

woops

#

sorry, will remove

stuck fractal Apr 30, 2020, 7:47 PM

#

also use backticks to get discord not to format

nocturne vault Apr 30, 2020, 7:48 PM

#

ty 👍

stuck fractal Apr 30, 2020, 7:48 PM

#

@graceful nacelle name = exploit isn't the same as name contains exploit

inland onyx Apr 30, 2020, 7:48 PM

#

@nocturne vault What's up with JOAT?

nocturne vault Apr 30, 2020, 7:48 PM

#

having trouble getting root "/

#

cant seem to find the entry point

inland onyx Apr 30, 2020, 7:48 PM

#

I figured
(watch as I try to remember how you gain root in that one)

#

Oh, I remember

#

Should be fairly straightforward -- it's the second thing you should be looking for with Linux privesc

#

First being sudo permissions

nocturne vault Apr 30, 2020, 7:49 PM

#

feels like i've checked everything i usually check for 🤔

#

and second being files with SUID bit..

inland onyx Apr 30, 2020, 7:49 PM

#

Correct

nocturne vault Apr 30, 2020, 7:49 PM

#

i did that like, 2 hours ago lmao

#

got nothing

inland onyx Apr 30, 2020, 7:50 PM

#

Bear in mind that's an ex-conference box. I didn't want professional hackers with full root shells running around...

nocturne vault Apr 30, 2020, 7:50 PM

#

I feel so freaking dumb right now

#

I always forget the freaking / after -perm ...

#

holy shit im mad, that's why taking breaks is important lol

#

cool thanks, nice box 🙂

#

@inland onyx

graceful nacelle Apr 30, 2020, 7:52 PM

#

-name pattern
Base of file name (the path with the leading directories re‐
moved) matches shell pattern pattern. Because the leading di‐
rectories are removed, the file names considered for a match
with -name will never include a slash, so -name a/b' will never match anything (you probably need to use -path instead). A warning is issued if you try to do this, unless the environment variable POSIXLY_CORRECT is set. The metacharacters (*', ?', and []') match a `.' at the start of the base name (this is a
change in findutils-4.2.2; see section STANDARDS CONFORMANCE be‐
low). To ignore a directory and the files under it, use -prune
rather than checking every file in the tree; see an example in
the description of that action. Braces are not recognised as
being special, despite the fact that some shells including Bash
imbue braces with a special meaning in shell patterns. The
filename matching is performed with the use of the fnmatch(3)
library function. Don't forget to enclose the pattern in quotes
in order to protect it from expansion by the shell.
no where does it say put the astricksSsSs inside the quatations

stuck fractal Apr 30, 2020, 7:53 PM

#

No, because you're not understanding the question

graceful nacelle Apr 30, 2020, 7:55 PM

#

find / find <what> find <where> type directory name exploits

nocturne vault Apr 30, 2020, 7:55 PM

#

@graceful nacelle look up wildcards

graceful nacelle Apr 30, 2020, 7:56 PM

#

i have ./*. but why would i need that when that looks perfectly fight

#

nm

#

check this would what i typed work in any other enviroment

nocturne vault Apr 30, 2020, 7:57 PM

#

you should have it in the -name parameter, it will match anything containing the word exploits

#

so for example, the directory named 123exploit will be matched, so will exploit1234 and asdexploitasd or simply just the name "exploit"

#

I have not done the room you are referencing, but I think this is what you are supposed to do if I've understood you correctly

stuck fractal Apr 30, 2020, 8:00 PM

#

You were looking for a directory named exactly "exploits"

#

Which isn't what you were asked for

graceful nacelle Apr 30, 2020, 8:01 PM

#

whew i feel better thanks now thanks guys

tight escarp Apr 30, 2020, 11:01 PM

#

anyone who has done Cicada 3301 and can explain to me what means uuse negative integers to go backwards in the text? I have tried a lot of methods using that hint but couldn't figure out the correct link

inland onyx Apr 30, 2020, 11:03 PM

#

||Use the line numbers||

tight escarp Apr 30, 2020, 11:04 PM

#

can i actually pm you? im confused af

solid patrol Apr 30, 2020, 11:05 PM

#

Links can have numbers in it

tight escarp Apr 30, 2020, 11:06 PM

#

got it 😄

inland onyx Apr 30, 2020, 11:06 PM

#

Better asking @solemn smelt for that @tight escarp.
I tested it, so I'm kinda limited in what I should be revealing 😆

tight escarp Apr 30, 2020, 11:06 PM

#

had to put head to head your hints and found the key

#

thanks!

solemn smelt Apr 30, 2020, 11:07 PM

#

Oh haha there is a hint as to how to use the negative integers at the top of the document

#

@tight escarp

tight escarp Apr 30, 2020, 11:07 PM

#

yes i know, but i have interpreted that hint like I have to start from the end of the line and go back

solemn smelt Apr 30, 2020, 11:09 PM

#

Basically|| If you use positive integers to go forward in the text starting at the first letter then using a negative integer you would go backwards from that first letter to the numbers.||

tight escarp Apr 30, 2020, 11:09 PM

#

yep, i guess that hint can be interpreted in more ways than one

#

fun room anyway 😄

solemn smelt Apr 30, 2020, 11:10 PM

#

It was very hard trying to find a good way to write that

tight escarp Apr 30, 2020, 11:10 PM

#

yeah, i can imagine

wraith marsh Apr 30, 2020, 11:22 PM

#

I initially thought that too, until I saw what they actually where 😩

shadow basin Apr 30, 2020, 11:23 PM

#

📎 unknown.png

#

can anyone give me a hint why it doesnt work?

white salmon Apr 30, 2020, 11:23 PM

#

where are you using it?

shadow basin Apr 30, 2020, 11:24 PM

#

at my pc, testing SUID escalation example

white salmon Apr 30, 2020, 11:25 PM

#

but are you using ssh or something? or is it your terminal?

shadow basin Apr 30, 2020, 11:25 PM

#

but I am not familiar much with python, do I need to install some library?

#

thats my terminal

#

i run linux as my OS

inland onyx Apr 30, 2020, 11:26 PM

#

For a start

#

Use Python3

shadow basin Apr 30, 2020, 11:26 PM

#

same result

inland onyx Apr 30, 2020, 11:26 PM

#

sudo python3 -m http.server 80

shadow basin Apr 30, 2020, 11:27 PM

#

@inland onyx amaizing thanks so much

stuck fractal Apr 30, 2020, 11:28 PM

#

@shadow basin Thanks for moving.

white salmon Apr 30, 2020, 11:30 PM

#

weird i dont need to use python3 to set it up

stuck fractal Apr 30, 2020, 11:30 PM

#

Systems no longer come with python2 by default

#

At least ubuntu

#

so python won't do anything

inland onyx Apr 30, 2020, 11:38 PM

#

@white salmon If you have both versions installed, you need to specify which one

#

Or change the symlink in /usr/bin

white salmon Apr 30, 2020, 11:39 PM

#

hm i think my python2 doesnt work then

shadow basin May 1, 2020, 12:11 AM

#

@white salmon " ls -ls /usr/bin/python* " might list all available 'python' versions

ornate narwhal May 1, 2020, 12:23 AM

#

room XXE task 2 , question 5. I have done the rest of the room, seems like an easy room, but that question makes me wanna hit the wall.

📎 unknown.png

#

can someone gimme a hint ?

last nova May 1, 2020, 12:32 AM

#

@ornate narwhal try https://www.w3schools.com/xml/xml_syntax.asp

#

I think this might have the answer

ornate narwhal May 1, 2020, 12:34 AM

#

@last nova thank you man, i dont know why i was looking for my answer in this line : <?xml version="1.0" encoding="UTF-8"?>

last nova May 1, 2020, 12:35 AM

#

lol I was sat looking at that for a minute or two as well

ornate narwhal May 1, 2020, 12:35 AM

#

well that makes me a feel a lil bit good.. im not that stupid after all 😄

untold birch May 1, 2020, 12:39 AM

#

on the last question of corp, can't connect or change the pw, I've tried it all, is the last question just not possible due to the expiration date? I've yet to find an rdp client that will let me log out and log back in. Could someone give me a nudge?

stuck fractal May 1, 2020, 12:47 AM

#

Microsoft RDP will allow you to connect and update the password IIRC

untold birch May 1, 2020, 12:49 AM

#

so do I need to spin up a vm or can i do it from the room's box

stuck fractal May 1, 2020, 12:49 AM

#

RDP into itself?

#

Sounds iffy

untold birch May 1, 2020, 12:51 AM

#

well the issue is when I try to log out from the provide box it disconnects me so I don't understna dhow I'd do it any other way because you need VPN to access the machine. and to my knowledge you can't be connected on two different computers can you?

#

connected to their vpn

stuck fractal May 1, 2020, 12:51 AM

#

No, you can't

#

But