can you find me now? try to kill my process 😄
#koth
steep agate
broken pilot
naw im good
i was like aww man i pissed him off
i dont know how to hide myself yet... and when i stay off tty i end up killing my shells trying to use vim
steep agate
i dont know how to hide myself yet... and when i stay off tty i end up killing m...
you need to upgrade your shell to full tty to use vim, in these circumstances
broken pilot
yea but doesnt that show up on pts?
steep agate
yes that is the problem haha
broken pilot
trying to change king with a one liner but its on lock GG @steep agate
fair adder
he is very fast
fossil pecan
Pm? <@118749350795935744>
sure! 👍
fair adder
What's koth?
rose nimbus
What's koth?
fair adder
Bet thanks
median tapir
Is it me or is KOTH having issues
fair adder
median tapir
@broken pilot can you still access the koth page?
nova tide
Is it me or is KOTH having issues
What seems to be the issue? 👀
median tapir
yeah the servers seem to be having some problems right now Havoc
That's a relief😅
nova tide
Is it though? 
rose nimbus
not for THM x)
median tapir
y'all know what i mean😂
jovial field
anyone up for koth? https://tryhackme.com/games/koth/join/69d451472baf633b77022fc0 ca.20min
fair adder
anyone up for koth? https://tryhackme.com/games/koth/join/69d451472baf633b77022f...
ach du auch hier 
quiet schooner
ach du auch hier <:KEKW:1032670181513769082>
Keep it in English only in this discord.
jovial field
ach du auch hier <:KEKW:1032670181513769082>
Yes i am here
sweet willow
@lavish crystal nice game 🙂
median tapir
<@955130136741691503> nice game 🙂
That guy is a menace with his persistence😅
fossil pecan
Anybody here interested in some "Holiday KoTH Challenges / Giveaways"? Haha, I'm thinking of maybe hosting some fun challenges and random stuff on stream, probably mostly KoTH, but anything THM could be fun! I already have a couple ideas, just wanted to see if anyone is interested, and if y'all have any other fun ideas! DM ok if you want to follow up 👍
orchid kelp
Jelo
cursive ether
Anybody here interested in some "Holiday KoTH Challenges / Giveaways"? Haha, I'm...
your buddy here😀
jovial field
Me too
broken pilot
@fossil pecan 
broken pilot
broken pilot
i had to get a couple hits in lol @steep agate
fossil pecan
Almost had me there @steep agate 😜
steep agate
Almost had me there <@745672959804571742> 😜
ya
this time you didn't import the koth module
are you testing your v2 ?
fossil pecan
This is kingme module, just does king maker and nothing else
steep agate
This is kingme module, just does king maker and nothing else
hmmm, right
fossil pecan
Want it to be one of my challenges, to try and get any king points against it
steep agate
then I need to do one in LKM too, now that I have more time from vacation
in C you can also do it
dry fossil
You've literally borked the machine I can't even access any of the webpages at all
@balmy crypt
fair adder
Me too
hoary mulch
Newuser800 GG man
steep agate
<@745672959804571742> what did u do with the king txt 😄
just protect
dusk cave
just protect
any tips on how to break that ?
fair adder
any tips on how to break that ?
LOL Tell me how to get bypass your stuff
dusk cave
LOL Tell me how to get bypass your stuff
why not in the end its a place to learn
you can always ask
fair adder
ok
fair adder
why not in the end its a place to learn
but i don't think anyone going to tell you how to bypass there stuff
fair adder
unique juniper
Isn't that against the rules? So dirty
steep agate
if this is allowed I'll do ```
chmod -R / 777
```
everytime
lol
fossil pecan
if this is allowed I'll do ```
chmod -R / 777
```
everytime
will break box 😉 GLHF 😛
fair adder
will break box 😉 GLHF 😛
you dont say. the guy from the screenshot above did so too. So again: if this is legal you can just put your name inside the txt, run chmod -R / 777 and win every koth. playing like the UNO-guy should not be allowed
fossil pecan
you dont say. the guy from the screenshot above did so too. So again: if this is...
that is technically against rules, and should warrant a reset
fair adder
this is against the rules, right?
fossil pecan
why am i not king
you can also check the "king service" running on port 9999 (from game box: curl localhost:9999 ) or over vpn (curl $VMIP:9999) - this shows most accurate "who is king right now" (from POV of game & actual scoring based on that service)
fair adder
this is against the rules, right?
@fossil pecan
fossil pecan
<@118749350795935744>
Yes, I believe it would fall under rule #8
Do NOT delete system binaries (except chattr) or change executable permissions on them (or their directory).
Best to vote reset
broken pilot
@fair adder yea, I believe he ran rm -rf / or rm -rf /bin when we were playing.. I think he might have got mad the game before because I used chattr to lock king.txt then sent chattr to /dev/null
fair adder
<@456226577798135808> yea, I believe he ran rm -rf / or rm -rf /bin when we were...
but thats kinda dirty too 🫡 acceptable but a bit dirty tbh
broken pilot
Yea but you could always wget a static chattr .. but I’m not gonna lie I’ve changed permissions on some binaries before playing against matheuz and niko so I guess it was karma lol… but I didn’t remove em completely ,, just made a copy in a new directory before changing perms so they could’ve been found easily using find…
fossil pecan
<@118749350795935744> did you see this LOL
haha nice, what's that output from?
fair adder
haha nice, what's that output from?
from the command logger
fair adder
haha nice, what's that output from?
i get your script to
fossil pecan
from the command logger
oh nice, i'm not familiar ... looks helpful haha, which tool?
fair adder
oh nice, i'm not familiar ... looks helpful haha, which tool?
XD PSpy you know right
fair adder
didn't recognize it lol 😆
happen with me
@fossil pecan do you have the koth.service can add that one
fossil pecan
<@118749350795935744> do you have the koth.service can add that one
?
it's part of machine for the 9999 serving king...
fair adder
ya i know but he remove the file /etc/systemd/system/koth.service also stop the king service
he also remove curl
LOL
fossil pecan
oh ya that's no fun 😦 ... i do have a copy of the koth binary and koth.service lol ... have had to replace & fix before (many times)
fossil pecan
hard without curl/wget tho lol
fair adder
ya bro
fossil pecan
i'll make my own
fair adder
i'll make my own
what ? (curl)
@stiff egret i have the log of the game can you stop this guys removing curl wget and removing /etc/systemd/system/koth.service also stop the koth service.
fossil pecan
netcat is there
well see if you can break my kingmaker ... even if we don't get points 😆
fair adder
well see if you can break my kingmaker ... even if we don't get points 😆
i don't think i have try lot may time
but still i will try
@stiff egret game id 61617 user rootpiebot Dm me if you want logs
steep agate
i saw u a number of times u appeared in koth with me several times
hehehe
steep agate
but thats kinda dirty too 🫡 acceptable but a bit dirty tbh
that's not dirty, that's a smart move hahahah, being the only binary you can remove xD
steep agate
<@580609268261191680> game id `61617` user `rootpiebot` Dm me if you want logs
I already had a fight with this "rootpie", he is developing autopwn's for koth ( this is on his github ), and in addition to removing all binaries from the machine, basically ruining the whole box
he playing very dirty
and besides being a very disrespectful person
nova tide
<@580609268261191680> i have the log of the game can you stop this guys removin...
It's written in the rules how to report. 🙂
fair adder
It's written in the rules how to report. 🙂
done
fair adder
and besides being a very disrespectful person
ya
steep agate
ya
and he and "troponix" messed up the machine again, i'm getting sick of playing koth like this
shit
LOL
fair adder
LOL
fair adder
ya Bro
steep agate
ya Bro
if it wasn't forbidden I would pivot the VPN of these two guys there, and then I would do the damage
there are new players that are ruining koth
fair adder
if it wasn't forbidden I would pivot the VPN of these two guys there, and then I...
ya bro but not possible
fair adder
there are new players that are ruining koth
or maybe they get ban before
steep agate
hehe
fair adder
😉
steep agate
or maybe they get ban before
i hope they get banned
fair adder
I have seen lot of people go over rules on koth but have't reported that much
stiff egret
<@580609268261191680> game id `61617` user `rootpiebot` Dm me if you want logs
Yes, as @nova tide mentioned, you need to report in the mail.
Please read the rules carefully, autopwns in any way are banned, things that can autoexploit a box with IP are banned and will result in a site ban.
This is for everyone.
If you have any script that can give you a root shell, by taking the IP, then it is banned.
You have been warned.
stiff egret
Use those scripts in Private games only. Any public match use of those scripts, if reported, will lead to a koth/site ban.
steep agate
Use those scripts in Private games only. Any public match use of those scripts, ...
@fair adder he stopped the koth service and deleted koth.service
fair adder
<@456226577798135808> he stopped the koth service and deleted koth.service
LOL Bro
broken pilot
If they get banned what stops them from making a new account and still continue what they are doing??
short tusk
Us bringing in the law?
crude tide
I just did a public koth and got all the flags, but even after writing my name in king.txt I didn't get any points
also it just finished and the round didn't get logged?
broken pilot
@crude tide are you sure your name was wrote into king.txt ? Did you double check ? Was it locked?
teal oyster
I just did a public koth and got all the flags, but even after writing my name i...
check file permissions bruuhhh
teal oyster
https://tenor.com/view/whats-up-scary-scary-movie-scream-gif-16966640
Almost done with my exams then back to koth games 😆 🤝
broken pilot
Ight just getting off work now… played a game at work using the attackbox…….
crude tide
<@343540695572676609> are you sure your name was wrote into king.txt ? Did you d...
yes Im sure I wrote my name into king.txt
teal oyster
Ight just getting off work now… played a game at work using the attackbox…….
got the last exam tomorrow morning then freeeeeeddddddoooooooommm 😂 😂
teal oyster
yes Im sure I wrote my name into king.txt
Was the koth binary in the root directory?
Coz if it wasnt, then there's no way that the system will know that your king 🙂
crude tide
yup - c:\king.txt
teal oyster
yup - c:\king.txt
a windows box?
crude tide
yea
teal oyster
there's usually another directory if it was offline..... /king-server and youll find another king.txt file there.......
crude tide
oh rip (first timer)
fossil pecan
oh rip (first timer)
Took me several Windows games to find those king files lol 😂
steep agate
I think I'm going to make a script to protect king.txt from windows hehe
teal oyster
Took me several Windows games to find those king files lol 😂
lol same 😂 ....Was also at the same problem as @crude tide nevertheless we move on 🙃
crude tide
there's usually another directory if it was offline..... /king-server and youll ...
I looked into my logs and this is what I saw
seems like there wasn't a /king-server directory
teal oyster
enter the Administrator directory
teal oyster
Then dir and youll see a king.txt file and a king-server directory....
teal oyster
dont just create your own king.txt file lol,, look around the system and you'll find the file ....Mostly in the Administrator User if its windows....
broken pilot
@crude tide i believe that king file is at C:\king.txt
fossil pecan
dont just create your own king.txt file lol,, look around the system and you'll ...
on linux boxes it's always located at '/root/king.txt' (but 1-2 start without it, so you do create those ones 😉 )
@crude tide ^
broken pilot
looks like he was in h1medium ...
teal oyster
on linux boxes it's ***always located at '/root/king.txt'*** (but 1-2 start with...
oh yeah 🙃
teal oyster
looks like he was in h1medium ...
aah yeah coz of achilles 🙃
crude tide
Ahh but I found the king.txt in c:/ and changed that one
I looked through administrator and only saw a flag (also didn’t create my own king.txt lol)
Ehh I’ll make sure to keep the recommended stuff above in mind tho
broken pilot
sometimes you also need to refresh your browser... cuz that happened to me before , thought i wasnt getting any points , refreshed and had 210 points lol
even when its waiting to start the time may be off from your browser than you gave everybody a headstart
5 mins
ancient mulch
sorry if this is a common question but what's king of the hill in a cybersec context? how does it work, rules, etc?
dusk cave
sorry if this is a common question but what's king of the hill in a cybersec con...
King of the Hill (KoTH) is a competitive hacking game, where you play against 10 other hackers to compromise a machine and then patch its vulnerabilities to stop other players from also gaining access. The longer you maintain your access, the more points you get.
You can read everything here
https://tryhackme.com/games/koth
ancient mulch
King of the Hill (KoTH) is a competitive hacking game, where you play against 10...
thanks, appreciate it
humble pelican
I'm new into KoTH, any one wanna play with me?
dusk cave
I'm new into KoTH, any one wanna play with me?
i am out for today sorry but you can just join public games. At this time there should be people playing.
dusk cave
@steep agate i give up i think you fixed every priv esc 😄 gg
charred bobcat
Hello I here.
fair adder
charred bobcat
Yo if we're doing live we need to vc..
charred bobcat
but.. I gotta brb.
fair adder
you can if you want lol
charred bobcat
afk a few
fair adder
okay
devout salmon
I joined
fair adder
i saw 🙂
devout salmon
KOTH
charred bobcat
Am I gonna miss it?
fair adder
you can still join!
charred bobcat
Linky in dm
fair adder
bruhhhhhhh
look at all my windows lol
found RSA key
You guys reset the machien!?!"!?!?
brhhhhh
i was running hydra on the ssh password 😦
LMAO
charred bobcat
I'm getting error on vpn
fair adder
I'm getting error on vpn
dayum! reset and start over!
charred bobcat
You have fun while I upgrade my Kali install. lmao
fair adder
just restart your machine!!!
charred bobcat
Seriously getting fatal error while trying to connect to vpn.
fossil pecan
Seriously getting fatal error while trying to connect to vpn.
Can try to regen your VPN creds
charred bobcat
Just tried. Fatal error.
I'm updating my distro and will try again.
There's a lot of updates..
is gonna be all night.. I'm only at 2% right now....
fair adder
so i'm in
charred bobcat
Going up fast.. ish....
charred bobcat
hashcat
charred bobcat
i found an md5 hash
jump in voice because I can give you info even if I can't connect to the network
fair adder
jump in voice because I can give you info even if I can't connect to the network
thank u
sour vectorBOT
Gave +1 Rep to @charred bobcat
fair adder
Crack station not cracking it
fair adder
Woah
charred bobcat
If it's not in crackstation it's probably not rockyou
fossil pecan
👋
charred bobcat
They got u
fair adder
XD
fossil pecan
😄
fair adder
NO WAYYYYYYY
THAT IS SO FREAKING AWESOME!!!!!!
bro i'm inide i see the flag by can't crack the hash 
charred bobcat
Oh the 14yo is coming out in me on that one...
fossil pecan
😛
fair adder
that's master skills right there
charred bobcat
That's a rooEmote
fossil pecan
another one coming in a sec ... 😉
fair adder
charred bobcat
is a stolen emote
fair adder
fossil pecan
😆
fair adder
by any chance are you using the wall command? 😅
charred bobcat
F11.. wa are besties now okay? lmao
fair adder
i feel like i've been star struck but by a hacker
charred bobcat
I kid I kid I kid.. we just hackers and.. apparently one of them can't connect to the VPN right now.. which... makes the other one... better.....
fossil pecan
i can probably help you figure that out if you want/need it ...
charred bobcat
It seriously stopped me to prompt for something...
fossil pecan
typical
charred bobcat
biggest update ever.. worse than vindows
I may just spend my time updating my vm.. hey.. my new gf.. is my vm...
fossil pecan
😛
charred bobcat
Kali is kinda hotttt...
Actually I knew a girl named Kali.. and she was as hot as you think the distro is...
fossil pecan
hahaha
charred bobcat
Before Kali existed tho.. it was backtrack back then.
fossil pecan
I've been on and off with Kali since "she" was backtrack https://www.backtrack-linux.org/
charred bobcat
And if her name was Backtrack.. I would have been like "Yeah.. no.. gotta go"
fossil pecan
fair adder
you guys!!!!
charred bobcat
Not to mention that I dot it from DEFCON......
charred bobcat
alr.. well.. it's been real.. and fun.. but.. what machine are we hacking on right now?
fossil pecan
next public match in 20min
i'm happy to host/play any private games anytime too 😄
fossil pecan
i know the linux boxes pretty well, but i still need to learn a lot about windows lol
fair adder
wonder if theres more flags
fair adder
i know the linux boxes pretty well, but i still need to learn a lot about window...
ngl i did use the write up but up until the hyrda part
the rest pretty much memory
i ran gobuster and nmap on my own before the writeup
and /robots.txt
fossil pecan
wonder if theres more flags
if you hover over the flag icon next to input box, it'll say total number for that game
took me forever to figure that out 😛
this is one of the few boxes i haven't found em all .. i have 7/8
charred bobcat
pause.. I gotta update again.. lol. j/k
fossil pecan
ya i still gotta try again to hunt for that last one
fair adder
i can give you all the users if you want maybe it's in one of those other users?
saw it had mysql
so was gonna hack the database
next
fossil pecan
pause.. I gotta update again.. lol. j/k
still got 16min haha, and i got 3 games going i could use a pause lol
i think it's in the db, but i couldnt fiind it
fair adder
I'm still flabergasted
that i submitted flag 
Okay so i see that my enumeration is okay. now i gotta work on password cracking and hacking all these other vectors
@devout salmon hows it going????
devout salmon
Good
charred bobcat
Still updating.. but not really...
devout salmon
Nothing
charred bobcat
3306 seems very close to 3389....
Anyone got any entry level stuffs yet?
Someone got a shell right?
See.. I'm just getting started...
Kali finally updated and I'm rocking as slow as an iceberg.
stiff egret
Kali finally updated and I'm rocking as slow as an iceberg.
hit a titanic.
fair adder
Nothing
Check this out: https://tryhackme.com/resources/blog/guide-to-king-of-the-hill
Hello Mr.Holmes 
fair adder
stiff egret
can you send me that link? cba to find 😄
fair adder
Absolutely!!!!
charred bobcat
Low hanging fruit..
fair adder
stiff egret
ah yes! Thanks (:
fossil pecan
tyler game in 30seconds
https://tryhackme.com/games/koth/join/91209d53f641c00b06e53761
fair adder
lezzz go
devout salmon
Hi
devout salmon
I don’t know how to open machine
charred bobcat
We are done on this one then. Next?
stiff egret
I don’t know how to open machine
I would suggest you try the basic/easy/tutorial rooms first, as KoTH is not beginner level. Generally speaking.
charred bobcat
Fun tho..
Also my Kali VM is fully updated.. and connected...
I do need to get my Exploiting Active Directory room done this weekend though.. or it will torture my soul....
fossil pecan
join the game and run nmap
how's it going?
fair adder
running hydra
wondering if the username could be one of these dudes
had to restart my nmap scan
found the upload mechanism with gobuster
need to find a php reverse shell for it
gotta a whole bunch of things going on
someone got king
i need to install terminator 🤦♂️
charred bobcat
The guy on the right looks sus to me. Prolly him
charred bobcat
Wait wut? 🤣
charred bobcat
stego.. ok.
charred bobcat
I'm not in this round.. you don't have to worry about how long it takes me to update my kali...
fair adder
I'm not in this round.. you don't have to worry about how long it takes me to up...
Just do what snipe said
reset your vpn credds
redownload thme
charred bobcat
i'm good now
I'm just not big on competition and... well.. I had to update my VM. lol
It took forever.
charred bobcat
and?
fair adder
the name probably isn't in that names.txt from SecList that i used
might have to create my own
fug
charred bobcat
you gotta make it werk..
fossil pecan
wtf is up with hydra
||error: maximum authentication attempts exceeded for invalid user aaliyah || 😉
charred bobcat
don't.. delete.
fossil pecan
sometimes more is worse
fair adder
||error: maximum authentication attempts exceeded for invalid user aaliyah || 😉
"how you find this" djkaled voice
fair adder
LMAO
charred bobcat
slow always wins
fossil pecan
charred bobcat
The quieter you are.... etc etc.. wtf.. used to be Backtrack statement..... and stuff...
fossil pecan
🤫
fair adder
snipin been scoutin
charred bobcat
binary... mmm.. 0a eats that shizz up.
charred bobcat
I almost taught my boy how to count to 15 on one hand.. but... he failed.
fossil pecan
@fair adder dbl check the middle part of this error message ||Failed password for invalid user aaliyah from||
charred bobcat
binary
fair adder
<@456226577798135808> dbl check the middle part of this error message ||Failed p...
yesss
just bruteforcing the pass
that's what you meant no?
fossil pecan
"for invalid user ... "
fair adder
ohhhhhhhhh
fossil pecan
😉
fair adder
crap
fossil pecan
haha wanted to give you a heads up 😛
charred bobcat
yall on a team rn?
fair adder
yes yes thank u 🙂
fossil pecan
yall on a team rn?
im just hanging out and helping a bit 😄 ... im addicted to koth haha, and fun to help people learn!
charred bobcat
A: I told you all I was tipsy.. B: I told you all I was tipsy C: Kali was out of date and I had VPN connectivity issues... D: F yall.. I'm tipsy (joke.. love yall)
fossil pecan
h1 hard game about to start ... if anyone's up for a challenge
https://tryhackme.com/games/koth/join/33902b45fff9cc25b57b0555
fossil pecan
haha ya i can jump in VC in a bit
fossil pecan
Hopefully that's not against ToS or anything.
hope not i talk about how stoned i am all the time 🥳
charred bobcat
Okay. My headset has been on my tower for months.. and still has a charge...
Or.. I can just type
fossil pecan
up to you, im gonna switch machines and jump on in a few minutes
fair adder
great so i got steghide to work on that image
but no passphrase
on this image to be exact
fossil pecan
Can I spectate?
jumping in koth vc
fair adder
alright, attempting new username lists and trying exploiting smbclient
trying to exploit smbclient
but when i run smblient from my machine
its asking me for a password from my workgroup
i enter my password and it doesn't work
not sure what's going
on
this is looking really tasty 😋
gonna brute force this
but how
lol
i remember that with hyrda i have to copy a cookie capturing it with burpsuite and all that mess
shiiiid
lots to do
GG ya'll! Sorry for the spam there. This was extremely fun !!! Thank you for the help @fossil pecan
sour vectorBOT
Gave +1 Rep to @fossil pecan
fair adder
Super awesome!!! I was this close to getting flag again 😅
fair adder
tipped over even.
How's your machine?????
fair adder
||error: maximum authentication attempts exceeded for invalid user aaliyah || 😉
So now that game is over. Did you mean to say this was or wasn't the username 🤔.
Im.assuming it wasn't. I was way over my head on this one smh
stiff egret
gonna brute force this
why did you decide to brute force this? - Did you thought of trying to google what you see on screen?
stiff egret
well food for thought ( :
stiff egret
try googling what you see on screen.
fair adder
Noted
Loved the experience!! Gonna organize my tools and notes. Gotta learn how to exploit smb again
This was really insightful
Love this game .
Waiting a minute that was this
Was I trying to brute force a legal registered domain 😳
But why did that login page result in my Nmap scan 🤔
stiff egret
Was I trying to brute force a legal registered domain 😳
I think you really need to know what you are doing, the nmap scan showed you the page, login page of a CMS. And it also detected any links on the page, but general rule of thumb, you do not go after anything that is not owned by tryhackme, that is generally almost every domain that is registered. In KoTH (if any) all/any domains that are part of the game are only accessible after you manually add them to hosts file.
If you didn't add anything in hosts file, and it's still resolving, Do NOT go after that.
fair adder
I think you really need to know what you are doing, the nmap scan showed you the...
Yikes 😳
Yep I didn't add anything to my/etc/hosts file at all so I will watch our for this
Apologize !!! Dangerously unaware
I completely agree. I need to learn more on this before I start koth again. Gonna go back to my cyber defense studies
Jesus, how the hell did I not that see that
Coulda been in big trouble
jovial field
what the hell someone broke the machine: Failed to import the site module
Traceback (most recent call last):
File "/usr/lib/python3.5/site.py", line 580, in <module>
main()
File "/usr/lib/python3.5/site.py", line 566, in main
known_paths = addusersitepackages(known_paths)
File "/usr/lib/python3.5/site.py", line 287, in addusersitepackages
user_site = getusersitepackages()
File "/usr/lib/python3.5/site.py", line 263, in getusersitepackages
user_base = getuserbase() # this will also set USER_BASE
File "/usr/lib/python3.5/site.py", line 253, in getuserbase
USER_BASE = get_config_var('userbase')
File "/usr/lib/python3.5/sysconfig.py", line 595, in get_config_var
return get_config_vars().get(name)
File "/usr/lib/python3.5/sysconfig.py", line 546, in get_config_vars
_CONFIG_VARS['userbase'] = _getuserbase()
File "/usr/lib/python3.5/sysconfig.py", line 205, in _getuserbase
return joinuser("~", ".local")
File "/usr/lib/python3.5/sysconfig.py", line 184, in joinuser
return os.path.expanduser(os.path.join(*args))
File "/usr/lib/python3.5/posixpath.py", line 237, in expanduser
userhome = pwd.getpwuid(os.getuid()).pw_dir
KeyError: 'getpwuid(): uid not found: 0'
root@spacejam:/dev/shm#
where is this error from??? didnt see this one yet
did someone delete the root user?
root@spacejam:/dev/shm# sudo su
sudo su
sudo: unknown uid 0: who are you?
fossil pecan
Man yesterday was insane!
wanna play another? i can host private if you want
fair adder
Hell yeah!!! Not at this very moment but in a few hours is that okay ???? Would definitely love to
I stepped away from my machine atm 🥲 @fossil pecan
Also gonna be organizing my one liners here soon as well as do the Password Attack room on THM than after I can ping you and see if your up for it than 😀
gentle surge
Finally got around to playing some KoTH, loved every second of it 🔥🔥
gentle surge
Also gonna be organizing my one liners here soon as well as do the Password Atta...
Scripts are allowed? 😮 I thought they weren’t
fair adder
Scripts are allowed? 😮 I thought they weren’t
Woah! I need to be a bit more correct, excuse my incorrectly stated sentence there 😄. What I meant was one liners for one liner commands not scripts. I need to edit that
Like Nmap -A -p- IP
Stuff like that 😅
gentle surge
Stuff like that 😅
Ohh 😂 okay I get what you mean now
fair adder
Gonna get on some games soon!
ancient mulch
im still too new for koth, but one day i shall join you all
fair adder
I'm finishing up the Passwords Attack room
then gonna read up on the KOTH guide rules and documentation
Not trying to get banned.
turns out you can combine a whole bunch of wordlists together into one cool awesome list!
fossil pecan
Scripts are allowed? 😮 I thought they weren’t
Scripts and tools are ok, but full autopwn is not (auto hack+root+king+patch+etc all in one)
hallow mortar
Koth is da bomb! If you new guys want to hop on voice chat during a Koth game, I'd help give you some hints!
fair adder
Scripts and tools are ok, but full autopwn is not (auto hack+root+king+patch+etc...
God damn, you can do this all with one script?
the (auto hack+root+king+patch) ?
hallow mortar
the (auto hack+root+king+patch) ?
Yes. You automate just about anything with a script
ancient mulch
random but i like your about me @stiff egret
stiff egret
random but i like your about me <@580609268261191680>
thanks (:
sour vectorBOT
Gave +1 Rep to @ancient mulch
ancient mulch
no prob 🙂
fair adder
so i'm supposed to add my username to the /root/king.txt
like so echo "rokiikor" >> /root/king.txt
also the longer you stay as king the more points you get
i see why now f11snipe wasn't worried about the flags, rather being king lol
fair adder
Yes. You automate just about anything with a script
So according to rules it says scripts that autopwn or harden the machine can't be used
Niiiiiice so this is how F11snipe did the nyancat
instead of killing my shell 😅
love it !
so, once i'm king i'm suppose to be checking my processes and other things to stop peeps from getting in
that is awesome! this is where my blue team knowledge comes into play
can i use some of the SOC tools i learned from soc path on this? like Yara ?
that would be awesome
incase a user injects a root kit?
stiff egret
yes to all of that
stiff egret
like so echo "rokiikor" >> /root/king.txt
overwrite it
fair adder
Very coool!
stiff egret
fair adder
Going to next game. I kind of got a good view of how the game works now 😅
stiff egret
GL!
gentle surge
i see why now f11snipe wasn't worried about the flags, rather being king lol
Yes cause theoretically everyone can get the flags but whoever stays on root the longest will ultimately win. It is a great way to practice red and blue teaming
fair adder
Yes cause theoretically everyone can get the flags but whoever stays on root the...
Yes, it has come clear to me how important both sides of the spectrum (red/blue team) really are 😅
love how i can implement everything i learnt from THM on here, this dynamic of learning is incredible !!!
like a playground for hackers
and blue teamers, cause we can practice our patching skills
and monitoring skills!!!
so freaking awesome
stiff egret
Yes cause theoretically everyone can get the flags but whoever stays on root the...
YES, plus with outdated machines and static flags, everyone have flags noted down tbh
fair adder
YES, plus with outdated machines and static flags, everyone have flags noted dow...
I was thinking this yesterday!!
stiff egret
So they don't hunt for flags anymore. just aim for king, because you can always submit the flags in the last minute to get the edge, if needed.
fair adder
Since now I know the password to Shrek and all
gentle surge
So they don't hunt for flags anymore. just aim for king, because you can always ...
ahh I see. Thank you
fair adder
Hmmmmm 🤔
gentle surge
You can literally just ssh in, no recon.
Ohh but then where is the fun? Lol
stiff egret
It's in Hogwarts. (all passwords, ports, dynamic.)
Shameless plug
stiff egret
Ohh but then where is the fun? Lol
also the reason why a lot of the people stopped playing - it comes down to who have a better king brute tbh.
I have one with 350 process and a shit load of threads. It slows the machine so much that it's super irritating to work, but just enough for king service to work.
But what's the point in that anymore?
fair adder
also the reason why a lot of the people stopped playing - it comes down to who h...
will my machine still be able to brute with my average compute power? if staff makes it harder to brute?
stiff egret
def. king brute = a script or binary that bruteforces/forces your name in king.txt
stiff egret
So, if I am hammering the king.txt so bad that it is slowing the machine - others lose whatever chance they had.
Take it like a fork bomb, except 1. It is writing my name in king. 2. It is leaves just enough space in memory for king service to work and you guys to have a broken ultra slow shell.
What's the point in that? There is no fun
pair it with a really good persistence, it's almost impossible to kill and well, games get boring after first 30 seconds because you now know the root method for all machines.
fair adder
No fun at all. and speaking of fork bomb. It read in the rules "Any type of DoS" does this mean no or yes
stiff egret
No Fork Bombs absolutely.
fair adder
got it
stiff egret
Hence I said, just enough space
So it do leave memory for the webpages to work, albeit slow, and the rev shells to come back, again, albeit slow.
~~ Everything is working, just super slow. And with that much threading power, the only way to win is to basically kill that binary, and that would be impressive if anyone does that.
fair adder
~~ Everything is working, just super slow. And with that much threading power, t...
the binary of a forkbomb?
stiff egret
the binary of a forkbomb?
yes and it's not a binary of forkbomb, I used the term forkbomb to explain the idea behind it
fair adder
A MAC address is 4 binary character no? so when you mention binary in this aspect what binary are you referring to? @stiff egret
gentle surge
A MAC address is 4 binary character no? so when you mention binary in this aspec...
I believe he means a binary, as in a program. For example, bash and ping are binaries. You are referring to a binary number like 0s and 1s.
stiff egret
I believe he means a binary, as in a program. For example, bash and ping are bin...
Yes, exactly. 😄 Linux Executables.
fair adder
I believe he means a binary, as in a program. For example, bash and ping are bin...
Yes, this is where i was confusing the two!! 0010000 😅
stiff egret
no need for that sentence at all, we all are learning tbh
fair adder
This is why i love THM and the environment, you peeps are awesome 🙂
gentle surge
So he is saying that if some can kill the binary that is causing the king brute, it would be impressive
fair adder
So he is saying that if some can kill the binary that is causing the king brute,...
and anyone can wind up their binary to do this correct?
stiff egret
and anyone can wind up their binary to do this correct?
yes, a lot of the players have their own.
you can do this with a simple bash script too. but you would want it as fast as possible, and hence almost everyone prefers writing it in C/ or some similar language.
fair adder
That's impressive tbh
fossil pecan
~~ Everything is working, just super slow. And with that much threading power, t...
Have you tried against my "king switch" tho? 😜😘
fossil pecan
This is why i love THM and the environment, you peeps are awesome 🙂
Still playing? I might get on in a bit
fair adder
Still playing? I might get on in a bit
Running some errands than gonna finish up the Password Attacks room then I'll be ready !!
stiff egret
Have you tried against my "king switch" tho? 😜😘
I don't play anymore.
fair adder
Finishing up password attack room !
loving this username_generator.py
definitely using this xD
fair adder
Cupp is scary
it almost figured out my own password
crunch not cupp
i didn't input my real info in cupp
broken pilot
Wassup @fair adder i see you made it over to koth.. maybe I’ll c ya in a game and I can show you a few things I’ve learned so far…
devout salmon
@charred bobcat hi
fossil pecan
broken pilot
GG @fossil pecan was the only thing i could think of to stop it
fossil pecan
GG <@118749350795935744> was the only thing i could think of to stop it
well played haha, i checked back in too late ... was kinda hoping you'd tie me with flags and win that way 😛
i'm gonna probably play a few more tonight after i finish eating
also happy to host/join private practice matches anytime if anyone wants
charred bobcat
Yall doing koth rn?
fair adder
Wassup <@456226577798135808> i see you made it over to koth.. maybe I’ll c ya in...
Ayooooo! i was afk for a long while today.
Once i'm done with Sec + studies today around like 9 or 10 i'll hop on and do some KOTH with you peeps
fair adder
Yall doing koth rn?
In about 1 hour or so
you down??????
Learning how to configure my snort files
and snort rules
charred bobcat
RRRRRRRRRRROKI! NO! lol
charred bobcat
I haven't slept
fair adder
get some sleep silly
charred bobcat
It's been over 24....
fair adder
ouch
charred bobcat
Yep. Tomorrow maybe?
fair adder
maybe
charred bobcat
Insomnia + neighbors is a ... yeah...
fair adder
headphones?
fossil pecan
In about 1 hour or so
Lmk 🙂
fair adder
bet 🙂
fair adder
of course !
fossil pecan
ooo, soo close ... almost caught up to rootpiebot through a forkbomb! 😛 ... (tsk tsk btw lol)
fair adder
ooo, soo close ... almost caught up to rootpiebot through a forkbomb! 😛 ... (ts...
haha niice
finishing up this Passwords Attack room!
hallow mortar
Hey! So auto pwn is a no go, but what about a script that auto puts your name in the king.txt?
Something that could be scheduled as a cron job.
nova tide
Something that could be scheduled as a cron job.
No issues with that.
hallow mortar
Cool deal.
swift laurel
Go easy on me @broken pilot dont remember the last time i played haha
edgy torrent
nova tide
How can i learn koth anyone can help me
!docs koth
pearl gladeBOT
TryHackMe
terse mica
!docs koth
Thanks @nova tide big fan 
sour vectorBOT
Gave +1 Rep to @nova tide
broken pilot
@terse mica here’s a blog with a few tips and tricks… https://tryhackme.com/resources/blog/guide-to-king-of-the-hill
broken pilot
Just change your experience level in your profile to either intermediate or advance and that will allow you to join a koth game… from there enumerate and take notes,, along with some of those tips and you will be on your way…
terse mica
Just change your experience level in your profile to either intermediate or adva...
Thanks @broken pilot
sour vectorBOT
Gave +1 Rep to @broken pilot
leaden knoll
hi
hallow mortar
@leaden knoll your screen name is awesome! Haha
harsh obsidian
Starting in 23 minutes: https://tryhackme.com/games/koth/join/646efb15e5f170cd40c6ec77
hallow mortar
Starting in 23 min: https://tryhackme.com/games/koth/62276
broken pilot
@hallow mortar 😜 still have 42 seconds lol
hahaha that way puts in your name after i score the points....
broken pilot
yup it was...
hallow mortar
Hmmm. Might need a hint on this one!
broken pilot
i unmounted it now
fossil pecan
You mounted somethign read only eh?
Sounds like might be similar to the technique I went over recently here (shameless plug 😜)
https://youtu.be/wIDdrY-opPU
broken pilot
aww man thought i wasnt gonna be able to drop the flag cuz i refreshed browser with 30 secs left and it froze
hallow mortar
Thought I'd barely have enough points, but not quite. haha
broken pilot
GG
hallow mortar
Let's do it again some time soon with @fossil pecan too
And I'm going to brush up on some things until then!
broken pilot
hahahaha damn.. GG @steep agate
steep agate
hahahaha damn.. GG <@745672959804571742>
i'm back to machine haha
steep agate
hahahaha damn.. GG <@745672959804571742>
I had forgotten I was in it, I was just finishing watching alice in borderland
has anyone here watched it? haha very good
broken pilot
i figured you kicked me out and patched then went to next game lol tried to sneak 1 in
steep agate
either way you win this game, i was away too long haha
steep agate
i figured you kicked me out and patched then went to next game lol tried to snea...
what ?
lmao
I forgot I joined another game too
steep agate
gg haha, I almost lost it, I had forgotten it was in the machine
steep agate
steep agate
why did you destroy the world? because you closed a door
the guy just deleted all binaries just because i was protecting king.txt
lmao
"yakuzoweb"
jovial field
🙂
fossil pecan
quiet schooner
the guy just deleted all binaries just because i was protecting king.txt
Remember - you need to report this to the koth email
steep agate
Remember - you need to report this to the koth email
right
quiet schooner
Yazukoweb is Big cheater on tryhackme
Remember, email.
fair adder
Remember, email.
Email of yazukoweb ?
swift laurel
@steep agate gg i guess😂
fair adder
<@745672959804571742> gg i guess😂
???
swift laurel
What Guess ?
Im a bit confuse , im saying GG to MatheuZ im in a koth game with him and cant figure out to edit back king file ?
Absolutely nothing related to you friend
fair adder
Im a bit confuse , im saying GG to MatheuZ im in a koth game with him and cant f...
Use echo command
echo "your pseudo" >> king.txt
swift laurel
echo "your pseudo" >> king.txt
Thanks for the tip !
sour vectorBOT
Gave +1 Rep to @worn orbit
fair adder
😉
steep agate
<@745672959804571742> gg i guess😂
gg
steep agate
Yazukoweb is Big cheater on tryhackme
ya
fair adder
post link here
fair adder
You sent the spectating link 🙂
send the invitation link its the one above it
Damn you are GOD XD
steady basin
not in koth lol :/
fair adder
let's get this going !
steady basin
so how do you take the hill??
fair adder
setting up my machine.
You have to echo your username
inot the /root/koth.txt
'file
you can automate this if youwant
steady basin
your tryhackme username right
fair adder
yes
and unfortunately i know the password already to ssh into this but i will be fair and play from scratch
i ran through shrek already
steady basin
oh shii
fair adder
not thoroughly
so your still good
it's a windows !!
no wait
windows server my bad
so you need to add -Pn to your nmap;
i just thought of combining some seclist into one word list with cat
saw that matheus just hopped in
can't slow poke anymore need to ssh now !!!!
shhiii
bulls eye
damn
math got king
i was just downloading my reverse shell 😦
trying to see how to kick math off
if that's allowed ?
steep agate
trying to see how to kick math off
kick me ?
fair adder
How do i become king. aren't i suppose to like write my name on the file next ? and change the passwords?
to kick you out?
or am i understanding this wrong ?
proven garnet
Get your name in the king.txt
You can kick people but then they can’t battle with you
fair adder
yes with "rokiikor" >> /root/king.txt
fair adder
You can kick people but then they can’t battle with you
ahhhh i see
proven garnet
Yes but what if I make it so root can’t edit king.txt
fair adder
hence the quote, how can there be a battle without anyone in the ring
proven garnet
https://github.com/MatheuZSecurity/Koth-TryHackMe-Tricks great amount of info about koth here
steep agate
https://github.com/MatheuZSecurity/Koth-TryHackMe-Tricks great amount of info ab...
I need to update this repository of mine hahaha, it has very old tricks and tips, I need to put more new things
but still it helps a lot of people, and i'm happy about that xD
proven garnet
Haha definitely
steady basin
lol i had root in first 3 minutes i just dont know how to deal with all the little file protection tricks
that was fun tho
crisp torrent
broken pilot
swift laurel
People playing for christmas eve ?
stiff egret
Merry Christmas people!
terse mica
steep agate
Merry Christmas!
fair adder
I will in a couple hours
broken pilot
are you rattlesn3k @polar arch
broken pilot
did you get on the box ?
hallow mortar
mental birch
@ruby umbra how can I join?
mental birch
Yes
ruby umbra
You can select any one you like if you're a subscriber, so we can go with an easy one for now
mental birch
Which one do you want ?
mental birch
I don't mind any because its my first time , I have no clue 😅
So you pick something
ruby umbra
Let's go with "H1: Easy" then
mental birch
Starts in 5 minutes? Or 15 ?
ruby umbra
5
mental birch
Also , should I send the invite link here or Dm?
ruby umbra
I'd prefer DMs
mental birch
Alright
broken pilot
figures........
not even a minute in...why?
hahha guess they didnt like the ip address or something
hahaha wonder should i keep putting my name in king.txt just to see if they get tired of resetting
teal oyster
hahha guess they didnt like the ip address or something
@ethic lol😂😂😂
teal oyster
hahaha wonder should i keep putting my name in king.txt just to see if they get ...
It's gets kinda boring to be honest
charred bobcat
Stream some KOTH so I can learn the shiz
fossil pecan
Stream some KOTH so I can learn the shiz
Still trying to play koth?
charred bobcat
Not today...
vapid condor
No it's expected 👍
Doesnt it makes the the machine "unbeatable" then? chattr it and then remove chattr?
||If of course, there is not an alternative for it, which I dont know about||
vapid condor
Almost got you with flags 😂
Also I was unable to find your script for the king.txt.. Some sort of rootkit? I guess I have to watch your videos to find the answer haha
fossil pecan
BYOC 😜
Bring your own, best to expect not to have it on the boxes... Either busy box or precompiled static binary and wget from yourself
vapid condor
Bring your own, best to expect not to have it on the boxes... Either busy box or...
I am not that good in KoTH so far, doing it just for couple days, But I promise you, I am going to beat you some day haha
swift laurel
lets gooooo
hallow mortar
@fossil pecan awwww Haha.
vapid condor
Removing chattr gotta be against riles..
I feel like these KoTH games are getting out of hand with this scripts.. Doesnt feel like fun anymore.. Doesnt want to sound negative or bad, but KoTH today is more likely who will run their ultimate script first
I enjoy when people use different methods and techniques, it will offer more to learn, and its fun to find a new or different way
proven garnet
Would you like me to link you to a static chattr
vapid condor
You can
proven garnet
Spamming king.txt is annoying but that’s not what everyone does
There are plenty of techniques for king. If someones spamming it try targeting their ssh keys or they shells
Edit there script and put your name in it
There’s many things to do
vapid condor
Nice script from game I got ( ͡° ͜ʖ ͡°)
proven garnet
Analyze it and see how it works
Maybe people use the same techniques and you can block other people from using them
steep agate
wget https://raw.githubusercontent.com/posborne/linux-programming-interface-exercises/master/15-file-attributes/chattr.c -O chattr.c && gcc chattr.c -o chattr -static && python3 -m http.server 8000
@vapid condor
your static chattr binary
vapid condor
There are plenty of techniques for king. If someones spamming it try targeting t...
Yea, rootkits without tty and hidden processes, also dont know yet how to fight against those, but will learn more on that later
proven garnet
Look into how they are enabled on the machine
Maybe if you get a list of all the kernel drivers before the root kit is in then you can try to remove it
vapid condor
Thank you for tips
hallow mortar
Nice script from game I got ( ͡° ͜ʖ ͡°)
That's my script. XD https://github.com/redsquirrel7/KingMe
vapid condor
Pretty nasty
how come you didnt become root if you have this type of..armageddon script?
hallow mortar
@vapid condor even though it can be frustrating, there is usually a way to defeat people's scripts and such! And I didn't because @fossil pecan got there before me, and his scripts are stronger! XD
vapid condor
._.
Me who cant write scripts
I have this one ( ° ͜ʖ °) Its pretty harmful and friendly
Never hurt anyone (ᴗ ͜ʖ ᴗ)
hallow mortar
That's not bad!
And you said you can't write scripts! That right there is a script! haha
vapid condor
Maybe not bad.. but useless against.. that.. rm /usr/bin/chattr
But I am getting better at it everyday, which is the most important thing
steep agate
there are koth machines that don't have chattr and you have to upload yours, there are machines where chattr is pointed to /dev/null, and you have to upload your own chattr, it's part of the game
steep agate
I have this one ( ° ͜ʖ °) Its pretty harmful and friendly
against some players these scripts won't work, like @fossil pecan , and some tricks you can use with mount
but it is a good script
vapid condor
Yea, dont know what machine it was.. But when I wanted to use chattr, I got pronted cheese and got my shell killed
was kinda fun
I liked it
steep agate
Yea, dont know what machine it was.. But when I wanted to use chattr, I got pron...
were you on the production machine? this is the default of this machine
vapid condor
against some players these scripts won't work, like <@118749350795935744> , and ...
mount can be nasty I know, found new method of making king.txt read-only file system with it, pretty public method but I like it a lot
I know F11 use that method as well
steep agate
when you type chattr it drops a "cheese" on your screen and kills your shell
vapid condor
were you on the production machine? this is the default of this machine
Yea! thats the one!
steep agate
I liked it
ya hahaha, is fun
steep agate
mount can be nasty I know, found new method of making king.txt *read-only file s...
ya, but while he is very good, he is easy to counter
vapid condor
against some players these scripts won't work, like <@118749350795935744> , and ...
F11 is better then you?
true
but bulletproof against people who doesnt know about it (Like me 2 days ago 😉 )
steep agate
I know F11 use that method as well
against me or @fossil pecan use more appealing things hahahaha, give a good fight for king or persistence
proven garnet
mv nyancat /usr/bin/chattr
steep agate
F11 is better then you?
f11 is better than me, but gives a good fight for king, rootkit, persistence, vuln patch etc
vapid condor
mv nyancat /usr/bin/chattr
until nyancat is like literally sent into your shell, you cant just Ctrl-C out of it
steep agate
f11 said I was the first person to figure out how to "defeat" his rootkit
vapid condor
Yea, you are really good
steep agate
to build a king protect in C, or in LKM, it takes time and a lot of research
you can also hook in chattr or king.txt and troll it, you can do a lot of interesting things
vapid condor
Interesting.. never heard that before
steep agate
this also takes a lot of research time, studies, it's not easy to create these things in a short time
vapid condor
isnt F11 software engineer or something?
steep agate
isnt F11 software engineer or something?
I guess so
I think he's older than everyone here, he's 39 or 37
I'm only 17 hahahaha
steep agate
@fossil pecan is certainly a sysadmin and does not want to tell us hahahahahah
hallow mortar
Dang. I feel old....
vapid condor
👀
steep agate
f11 should do streams again, it would be cool, play a battlegrounds, koth, do events sometimes, that would move even more
why, it's so fun to play this, that you end up learning how to defend and attack machines too
steep agate
Dang. I feel old....
hahahaha
vapid condor
I like KoTH, It just feels stupid when you finding all vulnerabilities, trying to patch everything, and then someone with PwnKit,Rootkit and AbracaDabraProtectDaKing.sh comes
and you stand no chance
but stiill... Almost.. 😉 XD
hallow mortar
I like KoTH, It just feels stupid when you finding all vulnerabilities, trying t...
Man, that's what I should have called my script! AbracaDabraProtectDaKing.sh hahahahaha
steep agate
I like KoTH, It just feels stupid when you finding all vulnerabilities, trying t...
but patching the pwnkit is very easy, depending on the rootkit if the person uses diamorphine for example, it is very easy to counter