there goes for the 3rd time
#koth
brazen cloud
Although, there were king changes for "production" yesterday
boreal flare
i had the same issue yesterday with panda box
brazen cloud
Mhm yeah I've just started a private match to test a theory
boreal flare
ahh..
brazen cloud
Could you DM me the IP address of the box please?
boreal flare
sure one sec..
brazen cloud
Thanks ๐
stiff egret
Joined in :)
boreal flare
Hello mr holmes!
stiff egret
Hey!
boreal flare
How are you doing ?
stiff egret
Sure shoot!
boreal flare
Thanks!
So i tried creating the binaries..just like yours and they dont seem to work
which language have you used ?
stiff egret
I made in c and python, which binary were you trying to make?
DM me, they are a bit of spoilers.
boreal flare
okay..
stiff egret
Count me in!
cerulean sparrow
done
stiff egret
urgh offline
boreal flare
This is hard...
stiff egret
no offence to the creator, but I hate this box
(offline)
(probably because I don't know windows 
)
boreal flare
Well you're king..and you say u dont know windows...(maybe that's what humility is)
boreal flare
well getting to admin account is skill itself
stiff egret
this box is eternally slowwwwwww
boreal flare
i have tried that multiple times..(earlier..not now)
i never seem to get it to work
stiff egret
its 1/4 chance
boreal flare
ahh..
i'll try again maybe i'll get a shell
its 1/4 chance
that's why it took you 10 mins to get king..(i get it now)
stiff egret
that's why it took you 10 mins to get king..(i get it now)
@boreal flare exactly
after 4 minutes, you can't beat me in this box
I'll be king for 31 minutes
stiff egret
GG
boreal flare
aren't you going to submit the flags?
stiff egret
Since he is king, I gotta submit them at the last moment, that'll put me on top
stiff egret
Sure
stiff egret
This is an unknown place for me, I don't have any idea of windows commands, at all
tactical win
cerulean sparrow
dam it
stiff egret
cerulean sparrow
I were so close
cerulean sparrow
-_-
stiff egret
cerulean sparrow
F
stiff egret
Tho it was fun, I was googling every command
stiff egret
Dude I was trying to make while loop and realised I don't know shit in windows
stiff egret
ยฏ_(ใ)_/ยฏ
cerulean sparrow
stiff egret
fight me in linux 
cerulean sparrow
I was soooooooo clooooooose as hell
50 pts
fight me in linux
@stiff egret maybe tomorrow
stiff egret
Yeah Gotta sleep, It's 3:30 AM here
cerulean sparrow
lol
cerulean sparrow
1:59
stiff egret
and you can't exit it
brisk valve
anyone want to join: https://tryhackme.com/games/koth/join/491bb8f053cae2f29ad45ff6
fair adder
anyone playing Koth
covert comet
Is there a room you knit easily?
fair adder
@cerulean sparrow how can i join
cerulean sparrow
claick
boreal flare
by clicking on the link mate
@cerulean sparrow how can i join
@fair adder
fair adder
am in and who are my team mates or against each other
cerulean sparrow
F
boreal flare
xD
cerulean sparrow
my terminal right now
boreal flare
if you're not the one dev randoming people then who is
people want to know!!
who was the one urandoming everyone
raven halo
dunno
boreal flare
atleast not publicly
raven halo
found the binary
cerulean sparrow
starts in 5 min
raven halo
no, you'll just do that again lol
im trying to reverse it so i know what to do next time
boreal flare
xD..so youre scared
boreal flare
ahh...
raven halo
/usr/bin/cmatrix
boreal flare
in that case...i'll improve myself too!
raven halo
lol
boreal flare
gg @cerulean sparrow
cerulean sparrow
XD
another day
2 years of batch scripting are worthy ๐
why dont you search for flags ??
cerulean sparrow
ok
ruby arch
Ping me @stiff egret if u play another:)
ruby arch
happens to the best of us mate
stiff egret
ruby arch
Hope it gets better and i beat u in the next game ๐
stiff egret
I made extra strong coffee today, in hopes that I'll be on system for about 7-8 more hours
Now I have no internet and no sleep
ruby arch
stiff egret
I got my net back, ping me if anyone plays!
not you
Fun match vibes exit, its offline
west heath
Gonna be good
boreal flare
xD
boreal flare
can i have the spectator link?
boreal flare
not this one lmao
stiff egret
boreal flare
This is cheating...xD
stiff egret
west heath
I hate this damn exploit
stiff egret
there's an option to leave the room I used that option
true needle
can't time be less
boreal flare
there's an option to leave the room
i thought that you were in the game..lol..i left too ๐
stiff egret
That'll be a private game, (for less time)
boreal flare
just when 10s were left
true needle
That'll be a private game, (for less time)
@stiff egret how
stiff egret
west heath
how did someone already alter the king.txt file?
true needle
no me
stiff egret
west heath
are the ||creds|| even right for the ||remote desktop|| that you find in ||samba||?
stiff egret
yeah and that's a spoiler.
west heath
I have tried this room twice using that with no luck. Either i'm slow or not reading them right
west heath
something to do with ||tazers||?
west heath
That would be nice, but I think the creator should fix them too. I think that would save me an eternity...
west heath
Who is deleting flags?
stiff egret
In which machine?
west heath
offline
mint cargo
yeah i know. nostalgia hit me like drugs lol
true needle
what is this?
stiff egret
- That's not me.
- You removed all binaries.
true needle
no
not me
i dont delete anything
nvrmnd.. someone moved most of the binaries.. not sure moved or deleted..
someone removed most of the binaries before i got root
reset if you want
stiff egret
@true needle The moves you did are, well, very dumb.
true needle
i swear i didn't move anything
stiff egret
Removing binaries is not the way to win.
true needle
i said i did not
most of the binaries were already removed before i get root
if it was not you it could be someone from those other two
whoever was using nyancat or urandom on my shells
stiff egret
GG man. No point trying in a box with almost all binaries gone.
true needle
spam killing shells is allowed?
stiff egret
removing all binaries is allowed?
true needle
i mean you play "Among us" and you still can't find the imposter?
true needle
nova tide
true needle
stiff egret
you me-er with f
stiff egret
LOL That was fun
nova tide
๐
stiff egret
๐
nova tide
planning to move to Italy next year
stiff egret
You serious?
nova tide
yeah
stiff egret
ayyy all the best!
nova tide
planning it out with friends. we all gonna move together.. its not even that much expensive and scholarships and all that stuff
looks nice
planning to do Masters in Cyber Security from there. and study for certs meanwhile
stiff egret
damn man, noice,
nova tide
we all talked with a guy who do this kind of stuff. he said it gonna cost you 5 lac for first year(fees+visa)
nova tide
for now we are 80% sure to move to only. lets see how it goes.. have like a year to plan things out
fair adder
what is this?
@true needle try to add 2>/dev/null
fair agate
KOTH is hard...
wary jolt
๐
full grove
chmod -x $(which chmod)
fair agate
Thanks!
ruby arch
I am in bro!
fair adder
https://tryhackme.com/games/koth/join/aa0927509fb06ea29b61f766
@vocal shell can anyone help me on how to get the first flag cos i dig up but couldnt find any
vocal shell
is anyone on the box rn?
fair agate
yes
fair agate
nope
vocal shell
hmm
fair agate
I am still working on getting the first flag...
vocal shell
how do you get root but not the first flag
fair agate
I do not have root
fair agate
this is my second time doing this one, and I got a webshell ๐
vocal shell
i found flags but i can't read them
fair agate
same
vocal shell
wow i spent an hour and i didnt even root it lmao
i couldn't, there is only one way
o lmao
this guy
inputs all his flags
ogey...
only gets 4 flags
nova tide
Which box?
ruby arch
Sorry haha i just patch one way the most common one using tmux
And i had other flags but had to go xD
grand ember
@vocal shell dm me
ruby arch
Tbh i dont know but there are always more than one way in koth
nova tide
dm me
@grand ember teach me too
grand ember
@nova tide you wish
nova tide
stiff egret
@nova tide How did project defence go?
nova tide
they said 4 practicals are not enough.. add more
brazen cloud
wicked tartan
How many machines are in koth
runic quail
I thought Szy shared a KOTH match link.
ruby arch
Anyone up for a koth rn?
inland sluice
@stiff egret You are learning Tex formats? What does your template look like
stiff egret
Very f'ed up.
learning is not the right word
struggling and failing very miserably should cover that.
inland sluice
can we go to PM?
or go to a channel othe than koth
What tek engine/ui you are you trying (echo? )
stiff egret
I installed tex dependencies to my system and now using vscode to compile
can we go to PM?
@inland sluice nothing much to talk about, I have almost given up on it.
inland sluice
do you have a pretty resume in word format already?
Or no pretty resume at all. just a bunch of gobblygook
LIke, are you just working on converting to tex, or writing something completely from scratch w/ a completely alien method
stiff egret
LIke, are you just working on converting to tex, or writing something completely from scratch w/ a completely alien method
@inland sluice yee, trying to make a good looking one in an entirely new method
inland sluice
I supported our researches tex needs for ... 12 of my 14 yrs i worked there
stiff egret
I already have a resume in docs template. but wanted to make one in tex
I am very new to this, started trying it a month back when CMN posted about it in resources.
inland sluice
May i suggest you try a different tex environment, something with more wysiwyg results
stiff egret
oh, ๐ค
inland sluice
try like overleaf
inland sluice
its like you are having to create two things simultaneously, both of which will have to be nearly perfect if you are not to end up discouraged
like rolling two dice, and if you don tget a perfect 6-6 .. you get frustrated
stiff egret
Oh
inland sluice
does that make sense?
If this advice helps, create a redacted template, one without company/personal names, but duties/skills intact! would love to see it
stiff egret
Sure, Can I ping you If I make something and need some help on it? (regarding tex)
dense igloo
Who want to do a KOTH ? Like right now
stiff egret
i say exploded, but i smacked w/ an aluminum ladder, and it did what you woudl expect ap iece of cheap glass w/ a metal screw going through the middle of it to do
@inland sluice u h uh, Take care โ๏ธ
ruby arch
This is my first game on tyler
fair agate
same
ruby arch
Am in! xD
lone wind
all the bestโ๏ธ
quiet schooner
@ruby arch please don't dump spoilers in here
ruby arch
ight sorry for that
inland sluice
@stiff egret How goes your online tex experience
stiff egret
In a A/D CTF atm. Gonna try it later tonight ๐
inland sluice
attack/defend? team vs team or something?
stiff egret
Yeah, internal CTF b/w teams
inland sluice
give em hell, ๐
fair agate
quiet schooner
isn't this considered attacking somebodys shell?
@livid dagger There's not a rule against attacking someone's shell
livid dagger
well, attacking user I meant
because it blocked my terminal
I'm not mad
I actually think it's hilarious what it's doing
and whatever it did, it actuall f*ucked up my terminal literally
quiet schooner
well, attacking user I meant
@livid dagger It's not. The shell exists entirely on the KoTH box and doesn't affect their machine
They're not attacking your machine, it's not against the rules.
Also, no need to swear. At all. Trying to censor it doesn't change that.
livid dagger
mk
boreal flare
..lol...!
sorry mate
isn't this against rules?
i get instantly disconnected
not complaining just asking :))
quiet schooner
Have you read the rules?
nova tide
scroll down a bit and read the rules:
https://tryhackme.com/games/koth
quiet schooner
I recommend reading the rules.
fair agate
quiet schooner
It's not a DoS against the machine
The machine remains fully functional.
No service is denied.
boreal flare
ahh..ok sorry about that..
fair agate
allright, we gotta come up with a plan here... two v one??
livid dagger
have you voted?
fair agate
can I dm you?
boreal flare
lol why is this 2v1 ? xD
fair agate
livid dagger
yes
boreal flare
xD
livid dagger
you can
fair agate
bahahah
livid dagger
dm me if you want
boreal flare
almost*
fair agate
GG all
boreal flare
GG!
vocal shell
hey naughty :)))
@nova tide is this your doing there was an error running your commandError: spawn /bin/sh ENOENT
nova tide
yeah?
vocal shell
ope
for some reason i couldn't nano/vi
or like edit any files lmao
can i dm u rq
nova tide
yeah
vocal shell
geegee naughty
ruby arch
Yep
nova tide
did you just imagine that Bashert is not my alt?
nova tide
time to call @true needle
ruby arch
Leaving
ruby arch
I was just sending another link
stiff egret
it's gonna be prolly 22 minutes
ruby arch
thats fine bruh (24 tbh) we can play tom
stiff egret
๐คทโโ๏ธ waiting for the update to get that start button
ruby arch
Dang cuz of joining a new room forgot to sumbit my flags in the room which was just a min to complete
and i have lost
ruby arch
Ah nvmnd it was fun
stiff egret
lol
ruby arch
Only one guy other than me was root
stiff egret
lost by 10 seconds
ruby arch
Gn man, cya tom
fair adder
that guy was good
at least you won! can you tell how you patched it at least i can learn from that
vocal shell
@fair adder for which machine?
https://tryhackme.com/games/koth/join/f050290af4b5990462c12d6e ongoing game i've locked down the box you can't get in @ anyone
fair adder
lol
i want to play another one i cant be n two and i dont want to lose any
how did you get the first flag
vocal shell
for which machine
fair adder
that machine
fair adder
how is that possible
vocal shell
i'm an Emperor
fair adder
how can access File uploaded /images/?
vocal shell
how can access: navigate to the /images/ directory?
lol
that's how?
i can't find the sixth flag ๐ฆ
fair adder
Not Found
The requested URL /images/ was not found on this server.
vocal shell
that means there's no images directory that is found on the server
fair adder
but i was able to upload a shell
fair adder
<!DOCTYPE html>
<html>
<body>
<div align="center">
<form action="" method="post" enctype="multipart/form-data">
<br>
<b>Select image : </b>
<input type="file" name="file" id="file" style="border: solid;">
<input type="submit" value="Submit" name="submit">
</form>
File uploaded /images/?</div>
</body>
</html>
vocal shell
on tyler?
fair adder
is just a text output telling it was uploaded to </form>
File uploaded /images/?</div>
raven halo
vocal shell
there's no way you're priv escing
i think it just ended
rip
who'd u log in as
did you just upload a reverse shell?
fair adder
anyone playing koth tayler machine
raven halo
Is there one running @fair adder
fair adder
yes
anyone to help me navigat to this File uploaded /images/?
source code does not show anything
boreal flare
its lost if youre reffering to me
boreal flare
GG!
raven halo
lol
im trying to reverse your nyancat and parrot
i see .bashrc
i cant have you coming into the box
im sorry
boreal flare
lol
nova tide
public game starting in 12 minutes:
https://tryhackme.com/games/koth/join/e2a988d1e18660055b5264d4
boreal flare
i cant have you coming into the box
@raven halo lets learn together...howd you do that ?
raven halo
dm me
boreal flare
killing ssh ?
nova tide
nvrmnd can't play.. peace out
boreal flare
Congratz Mr Holmes!
stiff egret
๐
boreal flare
for the KOTH staff role
stiff egret
ah That lol, ty :)
boreal flare
๐
boreal flare
i need to get a copy of all the binaries when playing with you xD
i'll host my bin with python server xD
stiff egret
boreal flare
lol that was a lot of writing
boreal flare
stiff egret
stiff egret
boreal flare
boreal flare
smh i'm on the box this time
boreal flare
well there's no find binary so it'll take time
stiff egret
I didn't blow it this time
boreal flare
ahh its just perm denied
boreal flare
ummm...dont know whats happening in that case
stiff egret
boreal flare
stiff egret
Oh, I think that is intended.
boreal flare
well cant change perm either
stiff egret
Are you root?
stiff egret
Ah, nice one
boreal flare
||cat evil_script.py||
@stiff egret this was such a waste of time xD
stiff egret
What were you trying to do in that?
boreal flare
i've successfully wasted 20 mins of my time..!
stiff egret
so far
boreal flare
did i skip the priv esc smh?
stiff egret
LOL no, I think there are 2 methods unpatched for priv esc. (atm)
stiff egret
boreal flare
GG!
stiff egret
GG
ruby arch
stiff egret
You sure it's ||(only)|| immutable?
stiff egret
xD
boreal flare
uh huh
stiff egret
Oh damn. How the hell did I lose my 12 day streak.
boreal flare
i tried real hard this time to get rid of some of your stuff
stiff egret
boreal flare
but do you still have some stashed away?
https://tenor.com/oxZC.gif
@stiff egret oops!!
boreal flare
i give up...can't surpass you in this life time
boreal flare
No pg13 rating to the face ๐
stiff egret
In case you downloaded my binaries, some of them are infected to send me rev shells. Don't run them on your system.
@boreal flare
boreal flare
xD
it's too late
i ran them like weeks ago
tried to learn rev engineering for that
but ....๐คฏ
stiff egret
One of these days, I'll plant a rm -rf / in one of the binaries.
stiff egret
boreal flare
did i get even one of your shells?
stiff egret
um, right now?
boreal flare
yeah like in past 5 mins
stiff egret
I had no shell. I thought everyone left the game. So I closed my terminal
boreal flare
-_-
stiff egret
Um. Maybe bashert
stiff egret
I don't have ttys..
stiff egret
@ruby arch
boreal flare
ahh...i saw several backdoors in logs
vocal shell
what logs are you looking at
ruby arch
That wasnt me
vocal shell
i need a few hours im at work
stiff egret
ah, sadly our time zones doesn't match.
vocal shell
wary jolt
wary jolt
Nah. You want to?
maiden marsh
im donw
Anyone who wants to hop in
starting in 5 mins
If anyone is interested im in a public game feel free to hop in then
maiden marsh
lolol
vocal shell
holmes
holmes sir
u gotta be cheating sir
how u getting flags bruh
ur not on
u just know where they are
stiff egret
I got them when I was on machine 10 minutes ago, when you hardcore patched it.
maiden marsh
anyone looking to play?
stiff egret
Plus I think you did some borderline legal patches.
vocal shell
like what
stiff egret
I didn't get enough time, but I will log them next time.
vocal shell
bad
boi
there are 8 flags total
i still havent found the other 4
if i did i would've won, i had lots of time to
good game regardless
stiff egret
Indeed.
vocal shell
im confused as to what type of patching you think i did
stiff egret
Something around ssh.
vocal shell
that wouldn't be true i havent figured ssh out on the koth boxes
i didn't touch the ssh file
i actually thought you did something
because it wouldn't let me connect
but i think that was the time around the reset
stiff egret
I didn't get enough time, but I will log them next time.
@stiff egret ^^
stiff egret
ยฏ_(ใ)_/ยฏ
vocal shell
did i ever kill your shell
stiff egret
Nope.
stiff egret
ยฏ_(ใ)_/ยฏ
(I was king before reset for 28 mins. I am not that pro to get king without shell)
vocal shell
cries in 24 minutes
vocal shell
GG! good night dude
boreal flare
No I won't
vocal shell
vocal shell
koth anyone?
vocal shell
sounds good
raven halo
lets go
vocal shell
@raven halo
raven halo
is that the spectator link
honest sandal
raven halo
lol someone keeps on kicking me out
terse willow
All KoTH machines will have at least 4 ways in @raven halo
vocal shell
i didn't change any password i get an authentication error
wait no way at least 4 ways!?
vocal shell
describe what you're trying to do
vocal shell
i haven't patched anything ๐
well maybe
Retype new UNIX password:
passwd: Authentication token manipulation error
passwd: password unchanged
rip
idunno how to fix?
stiff egret
Eh, someone could have done that purposely, it's a defence nonetheless.
vocal shell
i'm the only one on the box
stiff egret
(you can't see others, doesn't mean they aren't there.)
vocal shell
hermes ๐
vocal shell
i know
raven halo
great
stiff egret
Ping me in next game. I'll join as well. :)
raven halo
lol @polar light tell me not to cat the flag.txt then continue to change the password for hermes ๐ฆ
stiff egret
(wrong tag )
raven halo
sure..
vocal shell
if i could change passwords then uh game would be over
i haven't patched like anything lol
terse willow
@vocal shell screenshot id?
vocal shell
sure
i fixed it btw
just now
alright people in koth only way in is via a reverse shell
terse willow
Or wait until the autogen changes those passwords back
vocal shell
autogen :o?
stiff egret
terse willow
How do you think the passwords change every game?
I put some fun tricks in that box, which is why we now have a bunch of scripted boxes
vocal shell
oh that's what you mean
raven halo
Did you create it @terse willow
terse willow
Fortune? Yes
raven halo
ok
raven halo
I only found 2
stiff egret
4 at the very least.
vocal shell
do you want a user @raven halo
raven halo
its ok, no point
GG
trying to find out the other 3 footholds
im sure you can do something with port 80
๐ฆ
vocal shell
i have questions for you
when you got a shell how many seconds before i kicked you out
terse willow
im sure you can do something with port 80
@raven halo a bunch of stuff
terse willow
Changed some file permissions?
vocal shell
most certainly
terse willow
Wunderbar
vocal shell
Wunderbar?
terse willow
German for wonderful/excellent
raven halo
GG
vocal shell
wait smokecode
you never answered my question
"when you got a shell how many seconds before i kicked you out"
raven halo
hermes same thing kinda but a bit slower
raven halo
i think because you knew I couldnt do anything because there wasnt any commands I could run
vocal shell
wait so when you got on
raven halo
it didnt work afterwards when you kicked me out - yep
vocal shell
you couldn't run anything
raven halo
correct
vocal shell
interesting
^ new game for anyone im kinda tired but i wanna do one more
@stiff egret
stiff egret
Booting my VM.
gusty cradle
๐ง
stiff egret
๐คจ
stiff egret
Screenshots are generally more helpful to explain your problem.
vocal shell
stiff egret
That is intentional on this box.
stiff egret
Actually it's not. It's a very common mistake people do on linux. You have to patch that bug and make it work.
vocal shell
i can't ping the box
vocal shell
stiff egret
ยฏ_(ใ)_/ยฏ
vocal shell
no it's not
gusty cradle
VPN issues then
nova tide
Koth-Staff is supposed to check on the people who are removing /usr/bin/* or chmod everything..
stiff egret
Also, don't leak your IP.
nova tide
chattr is fine
boreal flare
Koth-Staff is supposed to check on the people who are removing
/usr/bin/*or chmod everything..
Uh huh...mr detective
PG-13
vocal shell
rated G for geveryone
nova tide
just don't remove the binaries that are used to use the box?
stiff egret
Nope. Changed my payloads 2 days back. @boreal flare
boreal flare
vocal shell
gusty cradle
๐ง
boreal flare
That means I can't do my stuff anymore?
stiff egret
Legit stuff
boreal flare
Like the ones I showed you
stiff egret
I forgot, send again? ๐
boreal flare
xD