lol
#koth
livid mountain
fair adder
lmao
rancid pewter
I wont use rootkit this time
fair adder
are flags randomly generated? I would assume so
livid mountain
can't resubmit - ok
fair adder
alright boys the grind begins
rancid pewter
chattr
dapper escarp
livid mountain
mmh
hmmmm
two new tricks learned 😄
I can't even kill -9 your stuff
😢
Eh
GG @rancid pewter
quiet schooner
myDonuts has a rootkit 😉
weary kindle
can't wait for the rkit meta
livid mountain
might xD
I'm so sad my awesome script didn't work
i made the perfect meme script last night
wanted to try it
but for some reason I got a "file not found" error
it's complicated....
😂
rancid pewter
It in which language ?
livid mountain
bash
was just a simple shell script that wasn't too noisy and had had some tricks to hide itself
maybe the tricks fails
works on my pc 
full grove
rancid pewter
@livid mountain Would love to see that script in action
livid mountain
it's more simple than it sounds really
it's a trick i heard about in Darknet Diaries LOL
always wanted to try it
rancid pewter
Seem really interesting
livid mountain
want a peek?
You're gonna spot it and mitigate anyway so I don't mind sharing hahaha
rancid pewter
Yeah DM me
carmine hemlock
https://tryhackme.com/games/koth/join/de79bc1af57be6ca42476b09
Public koth if someone wants to join, starts in around 10min
last ether
Good game @sullen hound 😅
sullen hound
yeah
sullen hound
yah
sullen hound
And That might help me keep the king
last ether
It looks like you already memorized all the boxes
And That might help me keep the king
@sullen hound
Sure
I'm just a beginner too
sullen hound
I put 24 hrs to KOTH
sullen hound
You know why the name
gray warren
Look out the window, if you see a black van with antennas you have your answer 🤣
last ether
😅
jagged oyster
just started with koth, is there only user.txt and root.txt flags or are there more? or does it depend on the box
quiet schooner
@jagged oyster For SpaceJam, I think there's only user and root
For other boxes, there's 6-10 flags around the box
jagged oyster
okay that explains it, doing spacejam atm
quiet schooner
If you hover over the label for flag submission, you can see the number of flags
sullen hound
anyone playing koth
jagged oyster
hm, getting 404 when trying to join a koth im participating in
sullen hound
which koth
sullen hound
that happened with me too
lusty portal
can you give me the link please?
quiet schooner
oooh a fix
lusty portal
Game 3307 does not exist
Can you please refresh your page and copy/paste the link
Is it the same?
twin rapids
ahh too late ;D
spare scroll
is it any flags that is encoded?
sullen hound
why
fair adder
lol
spare scroll
lol
slate crow
reset again bois
twin rapids
why spam reset xD
spare scroll
why tho, if he can patch it in five min we have lost, if he cant why reset?
spare scroll
ohh, i didnt know
rugged pumice
lol there are a lot of new rooms added
to the koth games
haven't been active in a while 😮
twin rapids
ahh a fly
spare scroll
dayum u are clutching tho
twin rapids
bruh
gusty cradle
lol there are a lot of new rooms added
to the koth games
haven't been active in a while 😮
@rugged pumice Yuck, that fly 🤢
slate crow
if you beg
@sullen hound payback
sullen hound
@slate crow see who is winning
quiet schooner
What box?
spare scroll
panda
quiet schooner
Nice
spare scroll
yea
quiet schooner
So yes, you lost your only way in
twin rapids
man i didn't find any way in
spare scroll
@twin rapids same lol
quiet schooner
twin rapids
lul
quiet schooner
You're still taking the L
twin rapids
why u playin 2
quiet schooner
@sullen hound really? Remember when elf rekt you?
quiet schooner
You got beaten
quiet schooner
By elf and me
fair adder
@rugged pumice the pic is named muha 😂
yes me and James __Beat you __
@sullen hound james came in last minute and still had more points then you 😂
quiet schooner
Elf, just how bad are you at KoTH?
fair adder
im like solid bad 😆
quiet schooner
I'm in CoD MW
twin rapids
slate crow
nah, ain't got no time for ya mad ass rn, workin' on other stuff
quiet schooner
People can be busy
ocean granite
@sullen hound you even playing?
koth
the game you joined
alright
man how did you get the username?
can i pm?
personal message
mint cargo
@sullen hound do we have any more vulns that aren't patched? i joined like after 35mins
okay np
carmine hemlock
Seems like clirimfurriku patched everything
but idk if theres still smth. on port 80
nice
mint cargo
lol gg
carmine hemlock
yeah, had a pretty big lead from the start, already knew the box ^^
port 3000 on that box is just OP
mint cargo
yeah there was a 3000 nodejs running.. was it in the box from the start or someone started it?
quiet schooner
It's there from the start
carmine hemlock
yup
mint cargo
i was using it for the rev shell and someone killed it lol
i literally JUST entered the rev shell command
carmine hemlock
yeah, you arent allowed to kill services but idk how I'd patch a service like that anyways, thats how its supposed to work
quiet schooner
You can patch the service on 3000
mint cargo
yeah u can edit the index.js maybe
carmine hemlock
Don't we take away the functionality of that service then?
isnt that its only purpose xD
mint cargo
or run it not under root
quiet schooner
@carmine hemlock That's fine. You're not impacting the functionality of the service for a genuine, non hacker user.
@sullen hound I refuse to answer your rules questions for several reasons
mint cargo
lol
quiet schooner
Mostly the fact that you should have read and understood them by now
Considering you CONSTANTLY ask.
carmine hemlock
Well then, gtg to bed now, was a good match!
covert basin
harsh obsidian
KotH starts in 23 minutes: https://tryhackme.com/games/koth/join/4689685e4187b82be91d16dc
nova tide
Join if you want some urandom on screen 😂^^
nova tide
Killua in KOTH?
green zenith
lol
green zenith
@sullen hound can you reset the machine plz
?
can't access the machine
😦
even can't ping it
bro I know how to ping it
weak haven
vpn connected?
weak haven
i have a question about panda, can i dm someone?
it is regarding a initial access method
delicate vine
KOTH = King Of The Hill
delicate vine
brittle flicker
that isn't koth
i've never been to that site
but who's koth
Is he the creator of that site?
stop messing with me
that's edited with the html
silly
fossil jackal
xD
latent crest
weary marten
joining link?
civic oracle
Hey ya
@spare scroll and I are on a public game. https://tryhackme.com/games/koth/3396
spare scroll
ahhhh i just wasted 20 min on a brain lag
spare scroll
ait
spare scroll
hahahaha lmao
quiet schooner
@civic oracle Why not?
If it's a valid patch that wouldn't affect genuine users, why wouldn't you allow that?
civic oracle
If he just replaces the entire code with "abc" text file
that beats the purpose
It does affect all users
The app is completely broken
quiet schooner
That affects the availability
civic oracle
Yep it does
quiet schooner
Check the rules, but that sounds like it could be a rule break
Yep rule 2
Nice and clear
terse willow
Are they?
civic oracle
Yeah man 😦 gg
I created so many different users to maintain access
that wall trick you did ruined my life 😦
😄
whats some bullshit
ah
viscid girder
okay sorry
civic oracle
You guys wanna join the voice channel 😄
minor urchin
i cant join VC cus im in the livingroom
viscid girder
did you already htaccess the upload NSA?
fossil jackal
hi
civic oracle
Damn man
minor urchin
gg bois my laptop is gonna die now
civic oracle
He has denied login of every user on ssh
now we are completely locked out man
fuckkkk
Web vuln is patched as well
quiet schooner
@sullen hound Do you have a complaint to make?
The rules are PG13.
Single fbomb is "fine"
Excessive swearing is not
last ether
Too long the wait is bro
I'm going to watch a movie
And my time zone is different
Another time
Peace
gusty cradle
You sue them, because your NSA 😄
exotic quiver
What level do you need to be in order to play KOTH?
exotic quiver
I always get the message Only intermediate and advanced experienced leveled users can play King of the Hill., anyone know something about this?
raven harness
go to profile and change
exotic quiver
Ah, thanks. I forgot that was a thing 😂
gilded prism
aren't autopwn scripts banned?
brazen cloud
Ya huh
gilded prism
pretty sure someone in my game used one.
within like 5 seconds all acc passwords are changed.
it's you xD
brazen cloud
NSA
gilded prism
it's been 8 mins buddy
gusty cradle
What machine is it?
brazen cloud
There's no way to verify other then by the admins reviewing the logs. Send the url to koth@tryhackme.com
gilded prism
will do
gusty cradle
It's easy to root food 🙂
But if you want to report them do as CMNatic says
gilded prism
this room has been out a long time buddy. there's nothing in the rules about me knowing flags from a previous session. They have already said that they look to refresh at some point. The fact is it's impossible for anyone else to do anything when within a minute you've gotten root, changed all the passwords and kicked everyone out.
you cannot patch everything. you have to leave one open
read the rules
before you play
ty
also i have a second game open which was also food which i was root on. stop whining.
if you have to use autpwn just to feel good about yourself then go ahead. you're not learning anything being a sore winner.
terse willow
Patching all vulnerabilities is fine. Doing it with a script, less so
gilded prism
sorry but can we go back a couple messages. he legit complained about storing flags right. So if this is the case he's on in 1 minute. then that's storing creds xD
terse willow
@gilded prism drop an email to koth@tryhackme.com with the game number. The logs can prove if it's an autopwn or not
gilded prism
done it
brazen cloud
^
terse willow
As for storing flags and creds, it's a bit of a dick move. It spoils the game for other people
brazen cloud
There is no party other then the admins who can verify the logs
terse willow
Not much we can do about it yet though
gilded prism
i'll just mute and block the childish kid. Imagine this platform is to learn and have fun and you got guys like him lol
quiet schooner
Be the better person here, best move @gilded prism
brazen cloud
Hey, we can keep it civil though.
gusty cradle
James isn't a therapist 😛
terse willow
That's enough. Innocent until proven guilty and all. The admins will check the logs -- if there's an issue here then they will sort it.
Otherwise, there is no fault
quiet schooner
Under rules 2 and 4, please move on.
Nothing to see here.
Talk to a mod if you have a complaint.
terse willow
What's the complaint then?
gilded prism
?
quiet schooner
@gilded prism Please make sure that you respect rule 1.
Issue dealt with
Please move on
quiet schooner
If you have an issue with how I handled that, please take it up with @terse willow
terse willow
Ta James... 😆
fair adder
Anyone looking ot get into some KOTH
brittle flicker
Who’s Koth?
fair adder
yup, thats exactly what i thought. leaving this game.. no time for pwnscript players
good luck to the rest of them. thought i would give him another chance
63 seconds and all passwords reset and 2 of 3 enterances are patched
no human types that fast. good day. you are blocked
terse willow
@sullen hound this sounds suspiciously like another altercation, about half an hour from the last one...
You've had a fair few warnings now
fair adder
all reminds me of hte convo that James had in here the other day about trust
quiet schooner
For those playing along at home, that was a ban.
exotic quiver
typing so fast you can reset all passwords and patch 2 entrances in like a minute. seems legit
fair adder
i don't want the kid banned. just want someone to talk some sense into him. this is a platform for fun, learning, and growth.
terse willow
Don't worry -- kid's been a pain to quite a few people, for quite some time; despite being told not to quite a few times
stiff egret
loool, he's banned?
warm chasm
OK now that it's reset I know for sure. He also killed the blog for no reason
fair adder
he didn't patch the phpshell yet
stiff egret
LMAO0, btw can someone explain me how monthly leaderboards work? is it the right channel for that?
stiff egret
heading that way..............
carmine hemlock
Is chattr +i king.txt; rm -rf /usr/bin/chattr allowed? Someone did that in a match today...
gusty cradle
Yeah, it's allowed.
carmine hemlock
it's pretty stupid tbh
gusty cradle
You can transfer a statically compiled chattr binary to the box to counter it
carmine hemlock
Searched for smth like that in the heat of the moment and didnt find any, guess I'm gonna look for it now / make it for myself. Thanks for that tip
carmine hemlock
It was a centos box, tried to reinstall e2fsprogs but it had too many dependencies to download
quiet schooner
@carmine hemlock The VMs don't have internet access, so you won't be able to install packages
carmine hemlock
I downloaded them to my box, transfered to target box w/ wget and python simplehttpserver and then rpm -ivh
If the boxes had internet access it wouldnt have been that hard
(I downloaded the raw rpm files to my box)
exotic quiver
carmine hemlock
lmao
gusty cradle
Wasn't NSA banned?
carmine hemlock
from discord yeah
grand ember
discord only i think
gusty cradle
Dark mentioned about him being banned from site check the secret chat
grand ember
don't leak secret messages 11!!1!11!1!11!1!!111
terse willow
He was banned from the site. But he asked really nicely and got that one lifted on the condition of behaving absolutely perfectly...
exotic quiver
pretty sure it was just someone memeing 😂
carmine hemlock
appearently not
gilded prism
Glad to see some action was taken. It wasn’t fun to have fake reports against me earlier. At least he’s been dealt with. Thanks staff, super job!
rancid pewter
GG
warm chasm
GG
mellow bough
The ban on NSA has been lifted for the time being
mint cargo
lol just watching optionals' final match, Dark ur commentary was hilarious 😆
brittle flicker
Who’s koth again?
quiet schooner
@brittle flicker Hank Hill.
fair adder
hanKot Hill
brittle flicker
^-^
floral kernel
^_^
severe orchid
koth? 20min till start:https://tryhackme.com/games/koth/join/b3b0add52518fdddc416d1ec
exotic quiver
public game starting in 4 mins. https://tryhackme.com/games/koth/join/037bd439dffb70b65808693f
exotic quiver
is it normal on Production and Food that the king.txt file is always truncated and pretty much can't be edited? or is this a trick ppl use or smth?
quiet schooner
It's something people do
royal pilot
is anyone up for a koth? gonna start in 22 mins https://tryhackme.com/games/koth/join/a0599a11d3f36cde6efa2c51
livid ginkgo
I had a thing earlier where someone nerfed the king file to make it totally unwriteable. On production. Kinda want it to happen again so I can work out how to fix lol
royal pilot
Sure thing
Probably you're talking about chattr
Hop in
13ish mins left ;))
is anyone up for a koth? gonna start in 22 mins https://tryhackme.com/games/koth/join/a0599a11d3f36cde6efa2c51
@royal pilot
exotic quiver
I had a thing earlier where someone nerfed the king file to make it totally unwriteable. On production. Kinda want it to happen again so I can work out how to fix lol
@livid ginkgo pretty sure we were in the same game although i thought it was just the two of us actively playing. the exact same thing happened to me on Food, not quite sure what it was either tbh
livid ginkgo
I think it was... all I did was run a while loop. I got the notification ||when someone used chattr|| so maybe they just used that then left? Those other two didn’t do much... wonder if people are trolling... autopwn and troll.
I won’t lie I thought it was you who did that which is why I kicked you off the box lol. I wouldn’t play that dirty normally.
exotic quiver
😂
ye i have no idea either, i looked through processes multiple times, didn't really see any other activity or could find anything that could've possibly keep the king file from being truncated
livid ginkgo
Same here...
exotic quiver
i looked at it with tail for a bit and pretty much just a very quick spam of
watchdog2000
tail: file truncated
or smth along the lines
livid ginkgo
I was so confused why I couldn’t write to the file because I monitored processes like crazy, thinking there was a battle of the while loops between mine and a blanking one
Yes occasionally I kept trying different methods of getting the king back.
exotic quiver
eventually i just tried to throw as many while loops at it as i could with my name, but no luck in beating the truncating really
livid ginkgo
I used nano. Vim. Deleting the file. Echoing to the file. Using a while loop and echoing. Nothing worked lol.
exotic quiver
same lmao
I honestly feel like it might've been a bug tbh. I'll send an email to the koth address with the two game IDs that it happened in for me
livid ginkgo
Possibly Yeahh if it’s happened twice now.
exotic quiver
3467 - Production
3469 - Food
quiet schooner
@exotic quiver People have rootkits
nova tide
3467 - Production
3469 - Food
@exotic quiver umm what was the issue again?
just checked the games i dont think anyone of those would have root kits
exotic quiver
Essentially the king.txt was constantly being truncated instantly after something was written into it
nova tide
myDonut is the only one with rootkits i know of. (May be Westar as well)
exotic quiver
It's weird tho, cause why would they do it if they're not even participating for points
quiet schooner
@exotic quiver For fun? To test it?
nova tide
*troll
livid ginkgo
Do you get points for KOTH games?
hollow stone
someone ban optional, he's deleting flags in koth
gusty cradle
@hollow stone Really?
hollow stone
it was an accident tho, but he did delete it 🙂
exotic quiver
he echo'd his name into root.txt instead of king.txt 😂
weary kindle
the flag has already been reverted, put down your pitchforks
twin rapids
lul
quiet schooner
LMAO
exotic quiver
tbf, relatable tho. i did the exact same thing on accident earlier
twin rapids
Dalist snuck into da game ;p
exotic quiver
yeah, i had to sit there for 5 minutes wondering why i wasnt recognised as the king even tho i echo'd my name
then realised i typed root.txt instead of king.txt 
twin rapids
F
hollow stone
he also killed ssh smh
twin rapids
sabotage!!
harsh obsidian
@JohnHammond#6971 is kickin a$$ in KotH right now.
mint cargo
Hey did u guys see the stream? john/optional/superhero
twin rapids
jup
mint cargo
they are pitching ideas for THM
They are trying to take in more people and do like tournaments!
if this happens that will be so awesome! And they will try to make koth boxes as well
twin rapids
sounds great
nova tide
umm anyone knows who that Shikra guy is? in ktoh atm
exotic quiver
pretty sure i've seen his name a few times in earlier games, but thats about it
nova tide
@sacred viper sorry for ping but just wanted to say Eid Mubarak boi
btw if anyone wants to join in Carnage starting in 14 minutes:
https://tryhackme.com/games/koth/join/4b7a213db616206ea612564a
magic gorge
@nova tide - I'm in this koth game, and i'm wondering if something is going on...
/root/king.txt isn't matching the service
nova tide
No idea what that means ^
gusty cradle
Webpage updates after one minute
magic gorge
the service on 9999 was showing Shikra's username, regardless of what was in /root/king.txt
quiet schooner
Thonk
magic gorge
and my name appeared to be in there for a long time
quiet schooner
Sounds like they might have broken the rules and interfered with the service on 9999
magic gorge
but it might have just been changing last minute
quiet schooner
netstat -tulpn see what's listening on 9999
magic gorge
not sure, my shells got borked now
quiet schooner
What box is it?
quiet schooner
I can't help then
magic gorge
i'm not 100% sure though, i could be mistaken here
sacred viper
@nova tide Thanks Bro! Eid Mubarak to you as well!
nova tide
Khair Mubarik
sacred viper
@nova tide What's up with Shikra? that'e me!
nova tide
just saw the Pakistani flag sooo was just curious
magic gorge
i might have fallen for a troll of yours
sacred viper
Shikra is me, I just can't change my username on thm
sacred viper
but i dont think we are in the same game
nova tide
yeah i just found your discord name by search
sacred viper
Thanks @quiet schooner, skidy said this exact same thing almot 8 monts ago 🙂
nova tide
saw recent game running and saw your name
quiet schooner
@sacred viper It's implemented on the backend, just needs to be added to the profile page
sacred viper
Oh great, But my username on thm is already gone 😭
magic gorge
well played - absolutely destroyed me
i was riskyflea in that game
i was confused because from my shell my username was showing up in the king file for a few mins in a row, but the 9999 service was showing yours. I think I fell for a troll from the box or another player though
magic gorge
port 9999 is what the tryhackme uses
sacred viper
Ahhh! Gothca 🙂
magic gorge
i got nowhere with 8080
managed to get through 80
found one way up to root from there, but it wasn't a fun shell, and it went after a while
magic gorge
i think i might have managed to kill my own root in a panic 😄
sacred viper
ha ha ha 🙂
quiet schooner
No spoilers
magic gorge
shame, i kinda want to know how you got in through 8080
i found a login page and couldn't see a simple way past it
dammit, i just realised the troll i fell for...
the name of a particular file just dawned on me 😄
nova tide
shame, i kinda want to know how you got in through 8080
@magic gorge
gusty cradle
magic gorge
😄
i thought i was sitting with name in the king file, so stopped trying harder
i was wrong
sacred viper
😀
nova tide
well its always best to set persistence
^^^ doesn't matter if you are king or not it always helps you win the late game
magic gorge
i had persistent access to the troll
i can't really say any more without it being a spoiler i guess
i definitely need more practice at this
nova tide
Good Luck
magic gorge
thanks
jovial moat
anyone here currently playing?
sacred viper
Not me!
magic gorge
i am
jovial moat
Are we allowed to attack other players?
magic gorge
not their machines
jovial moat
I see...
magic gorge
the rule "No attacking other users" seems vague now i read it again to be fair
jovial moat
Yeah
jovial moat
I've avoiding being mean to others
quiet schooner
@magic gorge Killing shells fine
jovial moat
well smashing my pty seems pretty attacking
quiet schooner
Scanning their machines? Nope
magic gorge
yeah, i killed shells and catted /dev/urandom to his pts for a while
was assuming that was fine
sorry if i've misunderstood that
quiet schooner
That's fine
magic gorge
i'm pulling my hair out here trying to work out that permission you've set on that file though
quiet schooner
That's not their machine, that's their shell on the KoTH machine
@magic gorge lsattr
jovial moat
Is anyone else playing??
magic gorge
my poor backdoor user 😢
jovial moat
huh?
jovial moat
yeah, sorry about that
magic gorge
the latter is likely
magic gorge
😄
think it's a bit too late now
don't suppose you fancy giving his sudo rights back? 😛
jovial moat
Organisation policy forbids it
magic gorge
How quickly do change requests get processed?
fair adder
jovial moat
hahaha
magic gorge
root@spacejam:/root# tail king.txt
Daviey
root@spacejam:/root# cat king.txt
cat: king.txt: Permission denied
root@spacejam:/root#
i wondered if you'd modified cat
never wondered for long enough though i guess
quiet schooner
You know about tac?
magic gorge
not really
twin rapids
in reverse 😮
quiet schooner
cat is for concatenation
tac concatenates the arguments in reverse order or something
magic gorge
reverse line order it seems
jovial moat
how many vulns do i need to patch??
quiet schooner
All of them really
magic gorge
yeah, i got root quickly this game, set up some persistence, and nobody else had done anything to i relaxed on patching. you saw first hand how that went
jovial moat
😆
magic gorge
tac real-king.txt
riskyflea
the one i'm still confused about is how the king file magically gets the immutible attribute on it when i try write to it
inotify involved somehow?
quiet schooner
Someone has a script probably
magic gorge
yeah, couldn't see the script is ps
it doesn't seem like a timing thing
@jovial moat - is that rs1 something that was on the system, or is it yours?
livid ginkgo
ps aux May help. And ‘w’
jovial moat
rs1 is just a reverse shell
livid ginkgo
Let’s you see who is running processes. I had this happening earlier tho and couldn’t find out what I needed to kill.
I didn’t want to be an ass and boot people off every time they got back on
magic gorge
i always forgte about w
jovial moat
@magic gorge congrats on getting first blood. That was faaaast
magic gorge
congrats on the win. that was clinical once you got on
i saw the port i got in through, and new it's something i like to go straight for
i don't really get how aggressive to be to other players in these. I probably could have patches every vuln (or at least every obvious one) in the time i had as root, but that seems like it would just ruin the game
quiet schooner
Eh, I've locked players out for 58/60mins in a game before
jovial moat
Yeah.. I feel the same way, I mean - you just just wreck every pty that isnn't yours.
quiet schooner
Don't have to worry about wrecking a tty if they can't get a shell
jovial moat
chmod -x /bin/bash , nobody will be able to get a shell after me 😄
magic gorge
You could just script killing any new process, or any new process that is a shell of some kind
that could be a loop you paste in as soon as you get root
jovial moat
Ohhhhh that is a good call. I need to prepare some http redirects to rickroll if people try to use patched vulns.
magic gorge
Messing with user's deafult shells could be fun
exotic quiver
The thing with killing any new processes is that the machine wouldn't be usable anymore by "legitimate" users.
livid ginkgo
Rick rolls would be greatttt
There’s so much potential to trolll people
Still allowing them access. But trolling. The occasional boot off is okay too.
exotic quiver
Would be especially great on Fortune with the randomness I think 😂
exotic quiver
Tell them it's a 1 in 1000 chance to get a shell, but instead it's a 1 in 1000 chance to get rickrolled
quiet schooner
999/1000 rickroll, 1/1000 for a shell
livid ginkgo
Ha
magic gorge
Give them a shell on a different box
livid ginkgo
Now that
Hahaha
You set up your own little docker machine that they spawn into
And it even has a priv esc and king file
Damn that’s evillll
jovial moat
On it.
livid ginkgo
There must be a rule against that 😂
magic gorge
This could backfire when they escape the docker container 😄
exotic quiver
I was just about to say that, just make them a small environment with a fake root user and king.txt
quiet schooner
I thought about adding that to a KoTH machine
exotic quiver
Make them scratch their heads on why it's not updating that they're the king
magic gorge
I think someone has done a less over the top version of that to me before
I realised after the game ended
jovial moat
HTB had a docker one where you had to bounce between containers.
magic gorge
was that the reddish machine from a while ago?
jovial moat
yeah, ~2 years ago it was live
magic gorge
I loved that one
jovial moat
Same
magic gorge
there's somehting really satisfying about jumping through loads of docker containers
jovial moat
Yeah, i felt the same way. Wasn't haaaaard... but felt rewarding.
Anyway, it is late in Britland, go to bed @magic gorge 😄
exotic quiver
I mean, I feel that way already with just getting on a box, I can imagine how great it'd be to hop through multiple containers
jovial moat
@magic gorge Look forward to kicking your butt next time 🙂
magic gorge
In fairness, it is slightly dissappointing to get a shell and have no user.txt
I'm patching everything next time
Adding a ticket system where you request shells
Well played though. I was in pain for the second half of that
exotic quiver
Would be great if you could pull that off without interference
Inb4 there's a vuln in your ticket system tho
magic gorge
I'll make a deliberately vulnerable one. Just patch all the box vulns and run my own ctf
Most of me is joking about this, but there's part of me that is really tempted....
fair adder
whoever made carnage.... wow
livid ginkgo
Is it good? I’m hoping to find it tomorrow to give it a go
fair adder
well i have bashed my face against my laptop for the past hour so....
livid ginkgo
Ah wow then... damn.
If i weren’t already in bed I’d boot my laptop and VM and give it a crack.
nova tide
Anyone playing koth or planning to stream in KOTH-STREAM?
livid ginkgo
I might play a game later on
burnt depot
i hope to get another go at Carnage tomorrow
fair adder
it's allowed to change the ssh creds ?
livid ginkgo
it is
fair adder
how should we know it then ?
livid ginkgo
as long as the service can be used by a user, its fine. so no shutting services down, but password changing, or taking malicious code out is fine
fair adder
hmm
livid ginkgo
the vulnerability is disclosed credentials/easy to crack creds. therefore to patch you change the password no?
fair adder
the creds stored in the mysql , and it's still the old one i used but no longer work
livid ginkgo
ok so someone changed the creds so you cant get in that way - thats allowed. you just need to find another way in, or see if they set the password to something brute forceable (liekly not though)
fair adder
Okay !
livid ginkgo
damn misse dit
icy cave
still open @livid ginkgo
finite turret
Darkbandit...
stiff egret
Oh lol, I thought many peeps are in game
icy cave
nope
stiff egret
Actually m just too lazy rn to get up from bed and turn the sys on. Wanted to do this. Ah
livid ginkgo
man this is tough
unkempt pagoda
Starting in 10 mins: https://tryhackme.com/games/koth/join/cb30d85acceab01413a29b52
frosty bolt
I jumped in and saw two 0x9 and noped tf out
unkempt pagoda
Meh, i'm 0x9 but wouldnt consider myself as good at all
jovial moat
😄
fair adder
don't worry im preety sure you can win me cuz im noob..
jovial moat
@unkempt pagoda Are you still playing?
unkempt pagoda
Uh yeah im in that game i posted
jovial moat
@unkempt pagoda Is that 3532?
unkempt pagoda
3533
jovial moat
@livid ginkgo GG.
unkempt pagoda
People just resetting the box once you patch one of the vulns 🙂
exotic quiver
Public game starting in 18 minutes if anyone is interested https://tryhackme.com/games/koth/join/bfae10d4bf08db8cfa8dc60c
lost olive
i'm in!
lost olive
more binaries are gone ...
lost olive
looks like you win
exotic quiver
i feel like someone did a cheeky rm -rf /
the only folders left are /dev, /proc, /root, /run and /sys
lost olive
that's pretty nasty
exotic quiver
i voted for a reset
lost olive
yeah me too
quiet schooner
Report em
exotic quiver
yeah, will do
lost olive
a reset isn't in your best interest though. you're king atm
quiet schooner
Pretty sure THM stops awarding points if the king service is broken
exotic quiver
the koth service still seems in tact
it's still reading the king.txt file fine and awarding points, yikes
pretty sure the koth service lives in the /sys folder, so yeah
lost olive
well that was the shortest koth i've ever played
exotic quiver
Yeah, this machine is quite easy to be fair
lost olive
true. this is my first time playing it and got root in < 5 minutes
and it has a nice surprise that kills your session 🙂
exotic quiver
Does that binary really kill your session?
For me it never does, it just prints the cheesy strat text on wall but my session remains
lost olive
it's not a binary. it's a simple shell script
exotic quiver
ah, shame i cant look at it now 😂
lost olive
hope someone else hits reset so we can continue
exotic quiver
tho from the looks of it half of the game never even touched the machine anyway
exotic quiver
Reset is on 4/5 now, yikes
unkempt pagoda
Ssh is running but im getting kicked
exotic quiver
probably because it can't put you in the correct folder
these are the only things left on the machine atm
unkempt pagoda
There is a mail address you can report him
exotic quiver
Yeah I'm aware, I've done that
unkempt pagoda
Ah good
exotic quiver
I feel like I made the dude ragequit or smth, lmao
burnt depot
20m until go time 🙂 https://tryhackme.com/games/koth/join/7f936d8a6d2cb075a6b0ceb1
final nest
lol @exotic quiver man ur /dev/pts/5 right?
slate crow
gg boys
I was actually doing /dev/urandom on you duco
xD
you did really great tho
btw now everyone knows it once john hammond used it
xD
it's pretty crazy
icy cave
pretty easy to escape too
exotic quiver
When the machines have been around for a while it's pretty much just a game of cat and mouse really, I usually just upload a chattr binary and hide it somewhere with a name that fits with the folder contents
Would be nice if things such as passwords, ssh keys etc could be randomised per reset
exotic quiver
lookup busybox binaries
icy cave
if not theres some in #resources
full grove
@exotic quiver thats a feature being worked on ^-^
exotic quiver
Ah nice
Just posted it in #544951750801752079, but good to know it's being worked on. I'm sure that will make things more fun 🙂
full grove
agreed, password and flag randomization is probably the easiest of the set (for Linux anyways)
just head /dev/urandom for 16 lines then md5sum it
exotic quiver
Yeah I reckon it'd be a little harder with Windows, but probably doable nonetheless
full grove
dynamic ssh keygen shouldn't be too much of an issue either, it's just creating & testing the scripts
quiet schooner
The flag randomisation has to be implemented on the backend
Dan has a PoC, skidy needs to do it
worldly igloo
is patching vulnerabilities like removing the vulnerable code in a web server or removing suid binaries allowed?
quiet schooner
@worldly igloo Have you read the rules?
worldly igloo
yeah
worldly igloo
well, i just wanted to know what includes in "patching vulnerabilities"
quiet schooner
Patching the vulnerabilities is included.
The rules tell you what you're not allowed to do.
lost olive
you can remove suid binaries, or patch the machine in other ways. You can't firewall the machine or make it unavailable in any other way.
the rules are pretty clear on that
quiet schooner
@worldly igloo Just remove the suid bit tho
worldly igloo
okay
final nest
is there any prob i get a 404 cannot join public games
hollow stone
yeah, the site is being sucky
final nest
lol y now xD
teal field
https://tryhackme.com/games/koth/3548 Am I so good or the others so bad?
quiet schooner
The site is having trouble
teal field
Yeah, TryHackme is having trouble
final nest
Yea it's having some troubles 😐
teal field
https://tryhackme.com/games/koth/3548 Am I so good or the others so bad?
@teal field I felt like they were inactive
slate crow
is koth down ?
quiet schooner
THM is
slate crow
okay
teal field
How do you actually get a role on THM
livid ginkgo
You can sync your on site profile
slate crow
@quiet schooner actually THM is working, KOTH is the only thing which is not working on my side
livid ginkgo
You can get a discord token from your profile @teal field
slate crow
@quiet schooner actually THM is working, KOTH is the only thing which is not working on my side
is it because site is cached on the server side ?
slate crow
cool, let's hope for a new KOTH box
quiet schooner
Site doesn't go down for that
nova tide
cool, let's hope for a new KOTH box
@slate crow Carnage is already out
teal field
@livid ginkgo but where
nova tide
on your profile? ^
quiet schooner
@teal field On your profile on the site
Then DM it to the bot like !verify yourTokenGoesHere
teal field
I have it. Where can I verify it?
quiet schooner
Then DM it to the bot like
!verify yourTokenGoesHere
@quiet schooner
slate crow
let me know when KOTH is back pls
nova tide
its back @slate crow
slate crow
it's still giving me 404
nova tide
working fine for me
teal field
I think im to silly
slate crow
yeah, might take a while to update for me
final nest
Will it be up by today i meam koth?
quiet schooner
@teal field https://docs.tryhackme.com/docs/discord/verify/
slate crow
what do you mean by some games ?
final nest
So how long will it take for you guys to fully fix em
final nest
Yea it breaks for me
quiet schooner
I can view it tho
quiet schooner
@lusty portal If you can, the current active public game doesn't exist
nova tide
Last active game id was 3554
teal field
Now I have verify my token, but in my profile is no difference
nova tide
i think 3555 must be broken it may be automatically fixed within those 25 minutes waiting time or if an admin can just skip that game smh
teal field
Now I have verify my token, but in my profile is no difference
@teal field Where can i set my roll up
livid ginkgo
It says you are 0x06
teal field
ok . thanks
lusty portal
New games are fixed,I found the issue, will fix when I'm home tomorrow. Sorry about that:)
nova tide
Public game:
lusty portal
Whats the id?
lusty portal
Yeah, there will have been a short delay in that working.
teal field
Yeah, it works now
nova tide
@stiff egret nah too tired to boot up my vm
stiff egret
lmao
gusty cradle
That 404 icon looks oddly familiar 😁
teal field
I can not join the game?!
nova tide
ok it bugged out again..
teal field
https://tryhackme.com/games/koth/join/541265a6a73c3310488d0364 will anyone play
would be coool
slate crow
🙂
teal field
will someone join koth1
slate crow
sure
lost olive
what was that command agian to stop /dev/urandom from messing up your terminal?
lost olive
hm, that doesn't work if someone is already messing with you, though
mint cargo
yeah saw that in john's video. it messes up the stdin i guess
stiff egret
tyler retired?
nova tide
^^??
quiet schooner
@lusty portal tyler gone
nova tide
Ooh so that wasn't intentional
quiet schooner
Skidy didn't tell anyone if it was
Spacejam should be retired if any get retired IMO
stiff egret
ah true
lusty portal
No, the machine pool table list just shows 10 at a time:)
nova tide
Oh ok...
quiet schooner
@lusty portal Probably best to fix it then, if Tyler is still in there. Maybe a scroll bar or something?
leaden spoke
@rancid pewter did you remove everything?😆
leaden spoke
hahahaha
rancid pewter
What ?
There a bunch of way to bypass it and you can easily do 200 points to get your shell back
quiet schooner
@chrome pumice It's a DoS on your shell, not on the box or a service on the box.
leaden spoke
Hey GG @rancid pewter
rancid pewter
GG
leaden spoke
did anyone use the port 3000 script?