@boreal flare you did the box before ๐
@vocal shell yess๐
#koth
boreal flare
vocal shell
you didn't learn anything then ๐
tepid hornet
~~kali-undercover ~~
boreal flare
ok will be back in 15
vocal shell
just jokes
kk be safe
https://tryhackme.com/games/koth/9828 the next one (in 23 minutes for anyone who wants to join)
or if you're a subscriber drop a game that'll boot faster :))
tepid hornet
People can't join this game, even if they want to. This is a spectate link
vocal shell
how can i fix it
grand ember
Post the invite link
nova tide
gonna go out with friends to eat something
vocal shell
take care
boreal flare
@vocal shell koth?
boreal flare
ok sure..!
oak jacinth
!rank
pearl gladeBOT
TryHackMe
rapid spire
Someone to play koth?
stiff egret
Post the invite link, I might join :)
rapid spire
Okay
pearl gladeBOT
TryHackMe
hazy zodiac
!rank
pearl gladeBOT
TryHackMe
stiff egret
!rank
pearl gladeBOT
TryHackMe
viral lichen
Anyone wanna pwn a noob in 30ish mins?
nova tide
Why everyone is spamming bot commands in #koth but not in #bot-commands ??
wary jolt
stiff egret
can't come up with a witty quote
โOne can never have enough socks.โ -Albus Dumbledore
Headmaster to rescue.
fair adder
is it just me
or the ip doesnt work?
nvm
its laggy af for me
now its frozen and i cant ping it
obsidian dagger
ha dont worry it lagged a bit for me to in the begging
fair adder
no i mean it works
for 5 minutes
and then it gets frozen
over and over again like that
obsidian dagger
gg guys
lusty crown
rapid spire
H
fading anchor
waddup
west sky
vocal shell
im down for da koth ๐
vivid valve
Here with you Augustus
vocal shell
Nice :))
vivid valve
gonna give it the college try ha
vocal shell
What's that mean
vivid valve
just try and make some points no guarantees
vocal shell
my vpn isnt connecting ๐
vivid valve
hah good start!
vivid valve
ohh your image is messed up..
vivid valve
dang
vivid valve
thats crazy bud are you in vmware or virtualbox?
vivid valve
damn and I'm stuck over here lol
vocal shell
FIXED IT
vivid valve
nice!
vocal shell
downloading a new vpn
vivid valve
you got this
vivid valve
nice you must have figured how to to turn in that flag
lol
gotta figure out this wp and cant lol
vivid valve
not great lol
wpscan borking
if you wanna stick around after an possibly go over this I'd appericate it
vivid valve
tomcat
vocal shell
how far along are you
vivid valve
basically passwords ruined this for me
vocal shell
which users did you try
vivid valve
for which wp or tomcat?
vocal shell
either
vivid valve
shot you a dm
nova tide
Ok I can't sleep now. Time to play some koth then ๐คทโโ๏ธ
vocal shell
how do i upgrade da shell
what the fawk
@nova tide
i'm like in but i can't upgrade
my shell
i have a user shell
nova tide
which python3
nova tide
that should be working
Also i don't remember this being a cronjob.. who added this?? ๐ค
*/1 * * * * /usr/bin/find / -name "chattr" -exec rm -rf {} \;
@stiff egret ^^^
in lion
vocal shell
can't be me ๐
ok wait so why cant i run the kernel exploit
like its in /tmp
someone made a sudoers error
like in syntax
nova tide
๐คทโโ๏ธ
nova tide
also try python3 to upgrade your shell instead of /bin/bash ??
vocal shell
gloria
nova tide
vocal shell
im gloria
nova tide
Hye gloria i'm Naughty
vocal shell
i did
python3 -c 'import pty;pty.spawn("/bin/bash")'
exactly what i typed just now
nova tide
try again? ๐ค
nova tide
vocal shell
WHERE ARE THE SHELLS GOING
nova tide
you running those from rce?
nova tide
or from a shell?
vocal shell
shell
nova tide
do you see gloria@lion on your screen?
vocal shell
yes
nova tide
then that's you somewhat upgraded shell
python3 -c "import pty;pty.spawn('/bin/bash')"
ctrl+z
stty raw -echo
fg
<enter enter enter>
export TERM=xterm```sure
nova tide
i can make any box you want
nova tide
hackers?
vocal shell
bet
vocal shell
connection reset
nova tide
you are using previously saved id_rsa?
nova tide
how you are trying to ssh in?
vocal shell
just normall
nova tide
using an old password?
vocal shell
i used the one i bruteforced rn
nova tide
which user
vocal shell
campbell
nova tide
it's rcampbell
nova tide
try to ssh in then?
vocal shell
kk
how come for like ftp
i get permission denied for getting the files
get <file>
nova tide
idk
vocal shell
how did you get in so fast
nova tide
you gotta figure out on your own
raw bear
me and naughty were on this box when it first came out lol thats how
nova tide
i'm in for like 5 minutes already ๐คทโโ๏ธ
raw bear
I just dont have my stuff saved so I have to get it all back lmao
nova tide
looong time @raw bear
raw bear
I had to upgrade my computer @nova tide so its definitely been a while.. lol I finally got my stuff and now i have an actual VM lol
nova tide
nice
raw bear
thats cool lol
nova tide
i can type in #voice-chat
vocal shell
i hate you
vocal shell
what did you patch @nova tide
vocal shell
i didnt change the root ssh key :/
i should've kicked you out when i was root
but i was scared to see what would happen if i did
nova tide
you can still do it
there's nothing patched rn
not sure if you could have found me though
nova tide
i was in like 6-7 minutes before you not sure if patching would do anything ๐คทโโ๏ธ
nova tide
i think:
vocal shell
which one
nova tide
i use killall /bin/bash you will be kicked.. so any of those two you are it will kick you out
nova tide
no
vocal shell
how come
nova tide
vocal shell
mine is also not a tty
for production
try do it
i cant privesc
because i deleted python ๐ฎ
nova tide
why would you delete python?? ๐คฆโโ๏ธ
vocal shell
SO OTHERS COULDnT
nova tide
chmod ??
vocal shell
yeah i should've
i learned
i got root
relativelyfast
like i couldve
kicked you out
i saw you
nova tide
...
nova tide
you never kicked me out ๐คทโโ๏ธ
vocal shell
yeah i didnt want to piss you off
vocal shell
because i don't know what tricks you got
vocal shell
yeah i'm going to improve
nova tide
GL
vocal shell
so you did killall right?
thx
my production machine is gone
but my other rcampbell is still up
nova tide
coz you said just to kick you out from prod
i can kick from rcampbell as well if you want?
nova tide
ping me if anyone wants to play more
vocal shell
I have to grind some more before playing KOTH
I'm not at that level yet
@nova tide how'd you root so fast
stiff egret
How come KoTH in morning today @nova tide
stiff egret
@stiff egret ^^^
@nova tide ah, I don't remember this cron being there either...
nova tide
so just joined koth
stiff egret
Um, not gonna be very useful anyway, people don't store their chattrs with original name ๐คทโโ๏ธ
then i checked the time it was 07:30am
@nova tide LOL
nova tide
not all the people Lakshman
nova tide
@raw bear @vocal shell you guys left?
vocal shell
i joined the game but i didnt want to boot up kali
nova tide
...
vocal shell
oh that game
yeah
i didnt know how to leave
lol xD
ok how do you get king but not all the flags ._.
stiff egret
you don't need flags after you own king file
Dunno why people don't understand that.
boreal flare
Morning Guys.. ๐
fair adder
Morning
vocal shell
I got the same thing @cerulean sparrow
No such file or directory error
Okay so this is pretty bad
cerulean sparrow
sorry
vocal shell
I wonder what the guy did
vocal shell
I can't do anything at all this is amazing
I can do /bin/ls -alh
@cerulean sparrow any luck?
vocal shell
the box reset
we have like 40 more minutes
oh nvm
2 mins
that guy did some thing crazy
what's his username
he made the box unusable lol
@boreal flareayush
oops
not lost sorry i mean @gritty hollow
oh fuck
how many PEOPLE ARE ON HERE
SORRY
boreal flare
xD
boreal flare
yeah
boreal flare
i didnt do anything
boreal flare
i was afk
vocal shell
I wonder if it was SuitGuy messing with everyone ๐
cerulean sparrow
I used this
16109/tcp open unknown syn-ack
port
I found image
download it
boreal flare
I wonder if it was SuitGuy messing with everyone ๐
@vocal shell He's someone from the higher ranks
maybe he was
cerulean sparrow
and steghide extract
vocal shell
yeah so he is extra smart
cerulean sparrow
then found creds for the other ssh
boreal flare
one more?
vocal shell
how wait so 16109 there was a port running
yes one more
is anyone subscribed so it can load faster
vocal shell
yeah that's why they're so good
cerulean sparrow
wanna play private game guys?
boreal flare
join
cerulean sparrow
ok
vocal shell
how'd you do that ๐ฎ
cerulean sparrow
lost ??
boreal flare
yeah
cerulean sparrow
you were the king ?
boreal flare
yeahh
vocal shell
you could do /bin/ls, /bin/cat, /bin/ps
boreal flare
nahh
cerulean sparrow
O.O
vocal shell
how are you even supposed to
cerulean sparrow
I'm stupid
vocal shell
know that
cerulean sparrow
I didn't know that before
boreal flare
you could do /bin/ls, /bin/cat, /bin/ps
@vocal shell when u can do this and not just from any directory
vocal shell
boreal flare
that means the path is messed up
vocal shell
but then that's a valid trick
cerulean sparrow
owww
vocal shell
if like someone doesn't know
cerulean sparrow
sorry
vocal shell
like i didn't know!
boreal flare
??
boreal flare
tty
boreal flare
how like an ss?
vocal shell
yeah like ss it
boreal flare
gone xD
vocal shell
did you patch?
nova tide
public match
boreal flare
nope
gusty cradle
@nova tide Not now ๐ but later today 
boreal flare
the pros are here
vocal shell
how come i can't ssh in
nova tide
ping me whenever you play
vocal shell
@nova tide can you ping the box
nova tide
i'm booting up my vm
boreal flare
your vpn is working right?
@nova tide can you ping the box
@vocal shell
boreal flare
๐
nova tide
i just got in and someone urandom me
vocal shell
i cant type in my shell
cerulean sparrow
nova tide
i cant do anything
@vocal shell you got king for 4 minutes still saying that?
vocal shell
im frozen again
after that i cant do anything
i cant type i cant
naughty do be kicking my ass ๐
whyy
always when i need to type most
i cant even ping the machine lmao
boreal flare
that binary is defected lmao
nova tide
that seems like your problem
nova tide
i think someone changed shell to rbash for shifu
vocal shell
not me i can't type
nova tide
also i can't seem to change password for shifu for some reason
vocal shell
i have like a gazillion shells
but i cant type in any of them
how did you chattr king.txt
chattr isnt on the box
did you make shifu have a key
you're mean @nova tide
I COULDNT EVEN TPYE
I WATCHED MY BELOVED SHELLS DIE
grand ember
You can upload your own chattr
stiff egret
gusty cradle
vocal shell
how to get out of nyancat
stiff egret
Than its Naughty trolling with you, he wouldve named it something normal otherwise
vocal shell
i was so close to beating naughty
๐
i was gonna persist
i cant ping machine
is messed up
gusty cradle
vocal shell
now my parents think weird things of me when they see nyancat going across my laptop
gusty cradle
nova tide
you cant get out of that
vocal shell
ope
it's impossible?
woah that is such a neat trick holy dude image blue teamers using that against red teamers in a CDC
that's what i'm going to figure out
because if they can't ssh in bruh there's no way they're going to get in
and kill your services
nova tide
i mean if i change the password for shifu it's the same thing
vocal shell
what do you mean
nova tide
you are only trying shifu ssh
nova tide
then you are doing it wrong
boreal flare
i was using pkill..silly me
nova tide
btw there are still some processes that kill -9can't kill
boreal flare
btw there are still some processes that
kill -9can't kill
@nova tide Thanks for the info
are there any methods to find out hidden shells?
does ps aux | grep pts show all of them ?
vocal shell
maybe
nova tide
nova tide
yeah
nova tide
if you can find that
vocal shell
find what :)?
nova tide
my PID
vocal shell
isnt it 11575?
nova tide
no
nova tide
its for the process ps aux | grep pts
that would automatically stop after a split second
vocal shell
try w
nova tide
boreal flare
so how can one kill ur shell?
vocal shell
try top
boreal flare
by trying harder
@nova tide
vocal shell
netstat -antp
vocal shell
last?
nova tide
you can try out those on your own
vocal shell
what else can you do
nova tide
nothing special
nova tide
no idea whats that
vocal shell
checking logs?
nova tide
never had to check it
vocal shell
um how would i find you then
nova tide
vocal shell
dude
nova tide
you do know that i can't simply tell you the way to kill my shells?
nova tide
Good luck
nova tide
No
stiff egret
LMAOOOOO
vocal shell
WHAT
stiff egret
This chat is turning out to be more fun than Instagram feed.
Is anyone playing KoTH ?
Or y'all had enough of ๐
nova tide
come DM i have something for you holmes
stiff egret
Interesting
stiff egret
dreams babe
nova tide
ok twice here as well
hasty quest
ok
nova tide
imma head out to eat something
native plume
Naughty plays koth too much.
potent oyster
nova tide
Naughty plays koth too much.
@native plume play koth with me
nova tide
Check pinned message
pearl pelican
... thanks !!! ๐
slender hawk
@pearl pelican B3nder do you have an tryhackme account
pearl pelican
... sorry i wasn't watching the chat ... yes i have one ...
tacit siren
hallow torrent
dusty canyon
yo
pearl pelican
@sinful field i'm connected ๐
sinful field
nice im ready
pearl pelican
๐ฑ
iron locust
hallow torrent
hallow torrent
tame veldt
You are already king
boreal flare
yeah bt cant ping the box rn
mellow lodge
stiff egret
You are not allowed to turn off ssh. (afaik)
people sometimes change ports.. That's allowed. Watchout for that.
Join in people! Starting in 4 minutes.
:))
offline.. Leaving.
nova tide
Run EB
gusty cradle
๐
wheat ravine
anyone up to play koth???
wheat ravine
m comming
i started with with jacob but m here again
m that much noob that dont even get a single shell
anyway i tries my best
stiff egret
sly turret
https://tryhackme.com/games/koth/join/a26166890052578c9b69a321
beginner 1st KotH for me
dusty canyon
ah ggs broh
stiff egret
You aren't playing?
stiff egret
You were in game?
dusty canyon
Yeye im jondoe
stiff egret
Oh lol
dusty canyon
Bord man
stiff egret
I didn't know!
dusty canyon
LmOa
stiff egret
stiff egret
๐
dusty canyon
Who keeps resetting
dusty canyon
Lmao uea
dusty canyon
I knew there was a reason for thay
stiff egret
I didn't see a thing/
dusty canyon
Hehehhehe
wheat ravine
anyone knows why chattr is disabled in the machine
stiff egret
Um, It's not, other's are just using it more than you ๐คทโโ๏ธ
wheat ravine
well well i tried for the first time today
so i was going through that few minutes ago
stiff egret
Is the game over?
wheat ravine
yeahabout to
1 minute left
m not aware about mitigation and all
anywhere i can find that
???
dusty canyon
chattr -i file
stiff egret
?
stiff egret
๐
dusty canyon
heheheh
stiff egret
I submitted the flags when 30 seconds were remaining.
ruby arch
Lets go for another one guys!
dusty canyon
Yeye sure
wheat ravine
yeah i say that
dusty canyon
Dope dope
wheat ravine
saw*
dusty canyon
Hm?
wheat ravine
one more???? @stiff egret @dusty canyon
dusty canyon
๐
ruby arch
Here...
ruby arch
This is public
stiff egret
23 minutes
dusty canyon
Yea quite a bit
ruby arch
The wait never seems to end!
stiff egret
It's already 3:30 AM here
ruby arch
Yes hehe
dusty canyon
Im watching john hammonds 7 hour throwback video
stiff egret
start a private game? 5 minutes?
stiff egret
Im watching john hammonds 7 hour throwback video
@dusty canyon I was watching planet of apes lol
stiff egret
ยฏ_(ใ)_/ยฏ
stiff egret
wheat ravine
m starting my system again
dusty canyon
lmaooo ight ight
ruby arch
U have like 3 mine homie
stiff egret
I won't
ruby arch
Same bro i feel ya ๐คฃ
dusty canyon
lmAO
stiff egret
jk jk
dusty canyon
iggght
dusty canyon
Lmaoooo dont wooory ur fine
wheat ravine
Its still starting dont if i'll be able to join you guys
stiff egret
wheat ravine
Actually i tried making my own virtual machine but its hell lot of heavy
stiff egret
Try making one using vagrant.
It's a bit more managed
I am running one using that rn.
ruby arch
My ssh never works.... it stopped in last game also
wheat ravine
Is it started
stiff egret
Heck, Even chmod is in place rn.
wheat ravine
Shit
stiff egret
Is it started
@wheat ravine YEah
@ruby arch Dunno about ssh, I am inside and ssh is working on port 22
dusty canyon
Oh yea idk
ruby arch
Nvrmnd my shell is stupid
stiff egret
Wait seriously.
dusty canyon
Welp
stiff egret
Who removed ls.
wheat ravine
Are you guys gonna start a new game after this
dusty canyon
No idea
wheat ravine
๐๐๐๐๐
dusty canyon
Lmaoo idk
stiff egret
Reset, I am in vote. Someone destroyed the machine.
dusty canyon
Lmao
vocal shell
Like python -m SimpleHTTPServer 80?
dusty canyon
Boooo python3 better
vocal shell
yk what I mean
ruby arch
Probably its already there unless someone messes with it
dusty canyon
Lmaoo
Wait is it the telnet shell
Cuz if it is u need to set the enviroment variable
vocal shell
No every box I go on chattr binary is not there
stiff egret
Ohk, Machine is not dead
ruby arch
For me itโs doesnโt seem to work
stiff egret
I was waiting on root for you guys
dusty canyon
Oh youuu
stiff egret
et tu brute
dusty canyon
I just exited my shell
stiff egret
LOL, Well I used absolute paths.
dusty canyon
I am depressed
stiff egret
We all are. ๐ฆ
dusty canyon
Welp ggs peeps imma go do homework now
stiff egret
And imma sleep.
ruby arch
Oh okay guys seeya later lads.
dusty canyon
Ight cya peeps
stiff egret
Sleep deprivation will catchup very soon
wheat ravine
Well when do u join @stiff egret
ruby arch
I have insomnia, pretty badass
stiff egret
Well when do u join @stiff egret
@wheat ravine ?
wheat ravine
@ruby arch u gonna sleep yet
ruby arch
Nope not yet
ruby arch
He is asking like whats ur regular time to play koth
wheat ravine
Yeah๐ m very much poor in english still tries my best
ruby arch
Its fine bruh
stiff egret
Um whenever I am online(?)
wheat ravine
๐ alright will stalk u on discord๐๐
stiff egret
dusty canyon
@stiff egret you motherfricker i tried out that fish shell and i almost got locked out of my own machine
the thing had the fish in the /etc/shells
but it wasnt working
stiff egret
๐
dusty canyon
and everytime it would just say hey this doesnt exist
so i had to modifyu that damn /etc/pam.d/chsh
you have no idea how long it took me to find it
to disable pam auth
i hate fish shell
never again
linux scary
stiff egret
Um. You know can just change the shell in /etc/passwd?
dusty canyon
ommm wait no but the chsh thing
stiff egret
Also, I use fish for 12+ hours a day and it never failed me.
dusty canyon
lmAO
chsh had a password lock on it
and i tried all my passwords
and it wouldnt work
so i panicked
dum shell
stiff egret
LOL
stiff egret
In ending of every line in passwd file, it define which shell the user can use.
dusty canyon
thats a good idea
vocal shell
kill all root processes >:)
stiff egret
You can change that.
vocal shell
change what
stiff egret
kill all root processes >:)
@vocal shell not allowed.
vocal shell
really?
dusty canyon
oh right /bin/bash
yea no im just stupid nvm
dont worry abt it shush
i remembered that dont worry
i knew that
100 percent knew that im so smart
stiff egret
really?
@vocal shell yeah. That will obviously kill all processes. Essentially killing the box down. Or equivalent.
stiff egret
There is a or to be a rule that you cannot kill services as long as there is a way to patch that