koth

[fair adder]

oki thanks

[stiff egret]

This is gonna be fun

[flint cloud]

Epic

[stiff egret]

Unless it is offline, then I am not playing,

I said that before the game started.

[flint cloud]

You'll have to

[fair adder]

offline's easy tho

[flint cloud]

yea that's the problem

[fair adder]

i mean , all of them are ez

[stiff egret]

I know that

[flint cloud]

[fair adder]

i did every box at least 10 times

[stiff egret]

Nicee

[fair adder]

that's why i get 5 flags in 3 mins lma

lmao

[flint cloud]

Oof

No autopwn scripts

[stiff egret]

[flint cloud]

No scripts at all

[stiff egret]

~~Who'll you complain to? ~~

[flint cloud]

To the staff

Um

Oh shit

[stiff egret]

[gusty cradle]

👀

[flint cloud]

[stiff egret]

[fair adder]

i cant find the sixth flag on tyler

anyone knows where is it?

i've checked everything

[stiff egret]

[fair adder]

=[

[flint cloud]

Ayooo

[stiff egret]

very very rare

[sharp parrot]

is it allowed to kill shells or change user passwords or these kind of things?

[stiff egret]

Yeah,

[sharp parrot]

kill shells too?

[stiff egret]

Yep

[static pollen]

hey

help mee

[stiff egret]

Regarding?

[fair adder]

am having problem with my ssh. cant continue.

[flint cloud]

Knew it

nyan cat

[gentle hatch]

works for me

[stiff egret]

With love, XOXO @flint cloud

[flint cloud]

[static pollen]

pleasee

i have money

[stiff egret]

@terse willow

[winged charm]

@terse willow

[stiff egret]

this is our chance CRy

[blissful kettle]

also in #thm-community-media

[winged charm]

@quiet schooner

[static pollen]

pleasee

[barren stream]

smy

don't you read #time-off

[stiff egret]

Sorry

[sharp parrot]

did you delete some files that privesc depends on?

[stiff egret]

No, I haven't patched a thing

[flint cloud]

It froze?

[sharp parrot]

maybe the other guy not you

[barren stream]

anyway I banned

but I forgot to add a ban reaso Nas I am literally on a date

pls don't tell Dark

[flint cloud]

Nice time to kill the wifi

[gusty cradle]

don't you read #time-off
They don't have access to that channel

[barren stream]

wdym

are koth staff not real staff

weird

[fair adder]

just being a spectator hehehe!!!!

[boreal flare]

lol

[gusty cradle]

@barren stream Only CM's and mods have access to that channel 😄

[stiff egret]

Muirrrrrrrrr

[barren stream]

No, designers do too

[gusty cradle]

[barren stream]

oh

just lounge

[gusty cradle]

Literally, it's only CM's and mods

[barren stream]

that's it

[gusty cradle]

Yep

[flint cloud]

We should reset

I accidently borked the passwd file trying to add a new user

[stiff egret]

wow

[flint cloud]

yea >> and >

[stiff egret]

I just saw

[flint cloud]

[stiff egret]

yeah

[gentle hatch]

i voted

[stiff egret]

[flint cloud]

[stiff egret]

@fair adder Please reset, someone broke the machine

[flint cloud]

This still won't stop

[gentle hatch]

reset please

[stiff egret]

I'd say, The cat is very loyal. @flint cloud

[flint cloud]

Ayo but the N-No scripts rule?

[stiff egret]

Um, I didn't use any scripts

[sharp parrot]

did you put in the while a command we cant change the perms of king.txt?

[stiff egret]

👀

My friend machine is broken, we need a reset,

[flint cloud]

RESETT

[fair adder]

did you put in the while a command we cant change the perms of king.txt?
@sharp parrot try harder!!!!

[gentle hatch]

-.-

[flint cloud]

Someone broke the machine

[sharp parrot]

lollll i dont know any scripting that involves low level

or something

[gentle hatch]

one more vote to reset pls

[stiff egret]

this is how broken it is

[flint cloud]

[gentle hatch]

for the love of god

[stiff egret]

blame Y3VsdAo=

[flint cloud]

Why would someone use such a horrible name

[fair adder]

You can't beat Holmes @stiff egret with flags hehehe

@sharp parrot nice game

[sharp parrot]

WHATT

how am i root and cant change shrek's passwd

or change perms of king.txt

how do you that

well im still a beginner so good game

[fair adder]

you are a king but holmes @stiff egret is coming to kick you lol

[stiff egret]

well im still a beginner so good game
@sharp parrot GG man,

[sharp parrot]

its really fun but u guys are good i need more ppl at my level

[stiff egret]

You got in crossfire b/w me and cultholmes

[sharp parrot]

lol

[flint cloud]

Yes

[fair adder]

yo they patched everything or i am dumb?

[flint cloud]

Noice urandome missile go brrr

[fair adder]

i cannot get back in

[stiff egret]

I didn't patch anything

[fair adder]

i cannot login with shrek

=[

[flint cloud]

who did ayo

[fair adder]

I didn't patch anything
@stiff egret Holmes never patch, he is damn good to kick you out again.

[stiff egret]

Nice color theme

[flint cloud]

and you borked it

[stiff egret]

your shell you mean?

[flint cloud]

[fair adder]

after the game someone should help me fix my ssh
Not able to ssh to another computer, but can ping it?

damn bruh i cannot get back in

[sharp parrot]

after the game someone should help me fix my ssh
Not able to ssh to another computer, but can ping it?
@fair adder maybe pass is wrong or has changed

[stiff egret]

damn bruh i cannot get back in
@fair adder there are multiple footholds in every machine

[flint cloud]

So -U its patched?

[fair adder]

@fair adder maybe pass is wrong or has changed
@sharp parrot i check that also and login with the right credentials

[stiff egret]

So -U its patched?
@flint cloud huh?

[fair adder]

they put pass on shrek

i cannot go back in

fuuuuu

[flint cloud]

That's the problem of knowing one way in , if you aren't fast enough then--

[stiff egret]

to whoever sending those walls, I am not the one who patched

[fair adder]

That's the problem of knowing one way in , if you aren't fast enough then--
@flint cloud i was root on the box lmao

[flint cloud]

Everyone was

[fair adder]

but someone made that shi....

and i got kicked out

[sharp parrot]

is it allowed to kill shells?

[fair adder]

yeaaaaa

[stiff egret]

Yeah

[sharp parrot]

kill id?

[fair adder]

ps aux | grep user

then u see the bash

and kill it

lol

[sharp parrot]

kill -id-?

[fair adder]

-______________________________-

[flint cloud]

[stiff egret]

man kill Give this a quick read @sharp parrot

[flint cloud]

kill -id-?
@sharp parrot I would show you , let me in

[sharp parrot]

nope lol

@sharp parrot I would show you , let me in
@flint cloud

[flint cloud]

[sharp parrot]

man kill Give this a quick read @sharp parrot
@stiff egret real man doesnt read instructions

[stiff egret]

[sharp parrot]

wait i killed 2 shells was it yours?

[flint cloud]

Real men don't patch

[sharp parrot]

beginners do

[flint cloud]

fear

[sharp parrot]

idk what to do really i grabbed all of my flags

bruh what just happend

[stiff egret]

This

[sharp parrot]

my shell got spammed

cat /dev/urandom?

is it just spam and you entered it to my shell?

im not angry lol im having fun i just want to learn new things

[stiff egret]

Yeah, Didn't know that was you,

[sharp parrot]

lmao

[stiff egret]

But yeah that's what I did

and by sending that msg, you made yourself visible

[sharp parrot]

but you know what user are you so why not eliminate the others?

[fair adder]

what stops people from just killing all tcp connections to other players?

[sharp parrot]

yea ik

[stiff egret]

what stops people from just killing all tcp connections to other players?
@fair adder rules

[sharp parrot]

but i thought killing is allowed

[stiff egret]

It is

[fair adder]

wait so I get to flood shells but not kill sockets?

[sharp parrot]

oh he wants to kill my pc's tcp connections?

can anyone do that?

[fair adder]

ss -tvp4

[sharp parrot]

what is that

[fair adder]

gets all socket connections and assoc. processes

[fair adder]

not your IP? kill the proc

fair point

it's not truly a game w/o an opponent to fight against

[sharp parrot]

ohhhhhh

alright i think im done for today i got 2nd place i dont think anyone will take that from me in this challenge

gg yall

[flint cloud]

Its over?

[sharp parrot]

no

[stiff egret]

NO

16 minutes

[flint cloud]

Yes time to figyht

[sharp parrot]

@stiff egret do you use c script to log your name to king.txt?

[flint cloud]

dont kill me

[fair adder]

I'll be down for a sesh later, never tried KotH though

[stiff egret]

@stiff egret do you use c script to log your name to king.txt?
@sharp parrot um, I can, but mostly it depends

I'll be down for a sesh later, never tried KotH though
@fair adder It's fun

[fair adder]

someone deleted sshd

😛

[stiff egret]

wha-

[fair adder]

oof

yup

/etc/ssh is gone

for ff sk

[stiff egret]

You gotta be kidding me

[fair adder]

inb4 "patched"

[stiff egret]

SMH

someone deleted sshd
@fair adder WRONG

[fair adder]

ssh != sshd

[sharp parrot]

@stiff egret dont let anyone get to king.txt ok?

[fair adder]

im at king.txt lmao

[stiff egret]

I'll try my best

[sharp parrot]

i love this emoji lol

[nova stream]

Doesnt eveyone know all the boxes because theres only a bunch of them?

I just started playing last night

[sharp parrot]

@nova stream its new for me too

[flint cloud]

me too

im at king.txt lmao
@fair adder

[nova stream]

When my vm broke down first game lol

[sharp parrot]

lol

[nova stream]

I gotta switch off virtual box its absolute garbage

But it lets you take snapshots for free

[fair adder]

uses VM
also uses vim
how do I exit?

[stiff egret]

Depends on how you use it, been using it for about a year now, no probs so far

I gotta switch off virtual box its absolute garbage
@nova stream

[nova stream]

Every other week that I start my vm it wont boot

And then after an hour after I kill the process it bugs out

[sharp parrot]

check settings if you set it correctly and gave it enough power

alright i gtg @stiff egret stick to king.txt

yay im 2nd place

[flint cloud]

You guys aren't playing?

[fair adder]

nb

[nova stream]

👏👏👏

[stiff egret]

You guys aren't playing?
@flint cloud I am

[flint cloud]

Who am I trolling then

[sharp parrot]

You guys aren't playing?
@flint cloud i got nothing else to do ill go jog a bit

i got all the flags i could find

[flint cloud]

Aight holmes told me

[boreal flare]

am i cool now ?

[stiff egret]

no

you are using VM

[boreal flare]

[stiff egret]

**!**cool

[flint cloud]

you a Impasta

[boreal flare]

which desktop environment do you guys use ?

[stiff egret]

window manager

[gusty cradle]

Unity 🤔

[boreal flare]

why that resolution tho ?

[gentle hatch]

who fork bombed the box lol

[fair adder]

@sharp parrot how did u got the sixth flag

?

[stiff egret]

Unity 🤔
@gusty cradle it's awesomeWM

[gentle hatch]

uhh whoever is looping wall

pls stop

[flint cloud]

they might have crashed their own shell trying to spam someone else ? maybe?

idk

[stiff egret]

They won't/ can't do that again

they might have crashed their own shell trying to spam someone else ? maybe?
@flint cloud that was me

[flint cloud]

Aight you stopppd the missile

[stiff egret]

Welcome to haxoring classes 101 by holmes: don't start a loop you can't kill

[flint cloud]

[boreal flare]

[severe yoke]

[flint cloud]

How the fork are you invisible ?

[stiff egret]

https://tenor.com/yYOk.gif

[fair adder]

=]

[flint cloud]

[severe yoke]

maybe he doesn`t have an stabilized shell

with py

did i wrote fine ?

idk

[fair adder]

ya ingles tresh

[flint cloud]

[fair adder]

huh, didn't some dev. a /bin/sh less shell a while back?

someone wanna play nother koth? this was kinda boring ngl

[severe yoke]

did i wrote fine ?
@severe yoke

@stiff egret

xDDD

someone wanna play nother koth? this was kinda boring ngl
@fair adder i would, but im still pretty noob :))

[stiff egret]

someone wanna play nother koth? this was kinda boring ngl
@fair adder if you want me in, then tag me 😄

[sharp parrot]

@sharp parrot how did u got the sixth flag
@fair adder
Find it

[fair adder]

https://tryhackme.com/games/koth/join/94a284ae2f6b511f4596a00b

starts in 5 mins

[severe yoke]

if you both make a koth could i get the spectator link ?

[fair adder]

ye

no one wants to play duh tf

[severe yoke]

F

[fair adder]

=[

[severe yoke]

which rank are you?

in thm

??

[fair adder]

idk , i have like 20 accounts

on my main 13 i think

[boreal flare]

wtf

[stiff egret]

@flint cloud sup? playing?

[fair adder]

yo guys if ya come at koth i'll give free pizza

aaa running home rn

[quiet schooner]

yo guys if ya come at koth i'll give free pizza
@fair adder If that's a lie, I'll be mad

[fair adder]

nah u good bro

https://tryhackme.com/games/koth/join/94a284ae2f6b511f4596a00b

❤️

[stiff egret]

...

[fair adder]

again tyler

[quiet schooner]

si tu viens pas je vais te nique
@fair adder Keep it in english please

[stiff egret]

(I should delete that)

[flint cloud]

@flint cloud sup? playing?
@stiff egret Guess what

[stiff egret]

[severe yoke]

[flint cloud]

[stiff egret]

Do share their reply 🤣

[fair adder]

back, joining

[flint cloud]

Ima have to record it tomorrow

[severe yoke]

Big F

[flint cloud]

[severe yoke]

well, if its useful for your conscience, im here while i should be doing some large homework too

[flint cloud]

[severe yoke]

[flint cloud]

kalm

[severe yoke]

yay

its much better be here

[flint cloud]

Yeah

[severe yoke]

i dont wanna make homeworkkkkkk

[flint cloud]

Aight Ima dip

GG guys

[severe yoke]

GG

Aight Ima dip
@flint cloud translation to clear English plz :))

F

[flint cloud]

Sleeping lol

[severe yoke]

xd

[stiff egret]

I was expecting at least 3 fights

SMH

@flint cloud

[severe yoke]

what is SMH ? (srry, english isn`t my mother language)

[stiff egret]

It's short for, 'shaking my head'

[severe yoke]

aaamm

[short tusk]

Shaking my hips like Shakira

[severe yoke]

nice

[flint cloud]

Ima fight you reg from tomorrow smhead @stiff egret

[stiff egret]

huh excuses

[flint cloud]

[fair adder]

@stiff egret ez

[stiff egret]

I can edit that sudoers you know

[fair adder]

that's how i got root

lol

meanwhile: oh neat jmx has notes

@stiff egret u son of a

@stiff egret u need to learn me how to do dat

i'm dumb as hell

no bruh fr now

i can't chown i can't do anything =[

[stiff egret]

huh? Why?

[fair adder]

permission denied

=)))

[fair adder]

u hafta learn me how to do that roo

too

;P

lemme guess

chattr

[stiff egret]

Yep, I thought you knew that already.

[fair adder]

tfw metasploit doesn't work and the poc you're trying to use refers to a defunct web resource

Yep, I thought you knew that already.
@stiff egret the problem is

that the box

[stiff egret]

huh?

tfw metasploit doesn't work and the poc you're trying to use refers to a defunct web resource
@fair adder

[fair adder]

doesn't have chattr

CVE : CVE-2010-0738 right?

[stiff egret]

(you can upload your own)

[fair adder]

oh

fu

i didn't thought of that

=[

[stiff egret]

CVE : CVE-2010-0738 right?
@fair adder which box?

[fair adder]

tyler? . _.'

[stiff egret]

ah THAT exploit

[fair adder]

that exploit

that one

[stiff egret]

not sure

😄

[fair adder]

oof

[stiff egret]

As I said, there are multiple methods to get in a box, 🤷‍♂️

you can try other footholds

[fair adder]

true, found stuff in smb so that's a step in the right direction, though to what idk

symbol lookup error: ./chattr: undefined symbol: fsetproject

wat

i found sqli in https://plmb.ro/ which is the police site of romania lmao

lemme see what they have in there , time for proxychains yey

[stiff egret]

symbol lookup error: ./chattr: undefined symbol: fsetproject
@fair adder wrong binary maybe

[fair adder]

=[

I don't trust proxychains tbh, it's no garentuee your requests get sent through it

at least that's what I saw w/ firefox

I don't trust proxychains tbh, it's no garentuee your requests get sent through it
@fair adder r u sure bout' that

probably a dumb application of it

iirc it just sets proxy env variables no?

hm

i got bored of koth , enough for today

maybe i'll go on htb , crack my head at those rooms

gg, got a flag at least. win for me (../)/

gg

[stiff egret]

[fair adder]

is that john?

lmao

[stiff egret]

yeaah

[fair adder]

ah lol

[stiff egret]

[fair adder]

:))

[stiff egret]

[quiet schooner]

They're gone btw

[stiff egret]

LMAO

[mellow bough]

Banned for the black hat crap and multiple warnings they received

[stiff egret]

how and why

ah, in general?

[mellow bough]

Multiple instances of vulgar language, black hat discussion regarding the website listed earlier in chat

[stiff egret]

ah, I thought mods let him pass, either way 🤷‍♂️

[mellow bough]

nah, we had pulled him aside multiple times

ah well

[fair adder]

wait he was serious about hacking the romanian police?

[mellow bough]

yepperino, he was posting a bunch of sketchy crap

We don't really like even joking about black hat things here, gotta keep it legal

[fair adder]

yeah, iirc the hacking community's already on thin ice w/ the discord admins given the nature of the server

[mellow bough]

We're educational

And we gotta keep it that way

We know some people are gonna be a-holes about that and it's just something we have to deal with on a case by case basis

[terse willow]

yeah, iirc the hacking community's already on thin ice w/ the discord admins given the nature of the server
@fair adder Not really thin ice, but given we're partnered, it's in everyone's best interests to keep everything legal (not that it wasn't already)

[plush lily]

how stupid, people like that end up in jail, not because of what they do but due to their big ego. either way white hat is the way up 💯

[quiet schooner]

Yeah, IPs in web based services are kinda standard

[plush lily]

For sure

All it takes is authority's to contact discord, get IP then contact VPN hope they have logs then gg gn

Although I'm not sure how the laws work in Romania

[nova stream]

What if they use TOR?

[fair adder]

ever tried making a discord account w/ a throw away email?

phone verif. instantly v-v

[nova stream]

There are websites where you get a number and can get SMSs

[winged charm]

hey guys can we move this to #infosec-general or #general as this is no longer related to koth

[fair adder]

kk

[covert vale]

Halo come to onlytanyaa room

[turbid narwhal]

anyone for koth?

[covert vale]

Yeah me joined ur room CRASHVENDETTA

[turbid narwhal]

Halo come to onlytanyaa room
@covert vale ooohhh

[covert vale]

Me noob first tym for this game

[turbid narwhal]

sameeeee

[covert vale]

Hahah @turbid narwhal noice jk

[turbid narwhal]

honestly, ive played this only 4-5 before

[covert vale]

Lol 4 to 5 ..

It's my first game lahh

[turbid narwhal]

youre already pro

[covert vale]

N0000 I'm not ..

My hands r shaking..idk

My ping also high

[turbid narwhal]

youre already on lvl A chillllllll

im noob you dont have to try hard youre gonna win

[covert vale]

Lvl A n00b :(

Dont submit flags quickly I need that title..halp me @turbid narwhal

[turbid narwhal]

i wont be able to find flagss chillll

[covert vale]

I dont think so

[turbid narwhal]

youll see

i most of the time end w 0 points xD

[covert vale]

Liar

[turbid narwhal]

im not lyin -_-

[covert vale]

Who's that guy itspossible9

[turbid narwhal]

idk maybe a random player

[nova tide]

game link?

[turbid narwhal]

https://tryhackme.com/games/koth/join/8e38e7a3ba92b45aba74ccd6

be fast

[covert vale]

My heart beating fast!!!

[turbid narwhal]

just 3 mins leftt

lmaoo this is just a game

[nova tide]

just booting up my vm

[turbid narwhal]

and im sure youll do good @covert vale

just booting up my vm
@nova tide yea cool

[covert vale]

Lol GOD tier @nova tide

[nova tide]

go easy on me

[turbid narwhal]

shitt lvl d

im dead

[covert vale]

I'm also bruh!!!

[turbid narwhal]

alsoo, plss dont patch im tryin to learn stuffs and dont reset plssssss

another lvl d

shittttttttttttttttt

ill be the last

:)

[lone wind]

is there any place where i can learn more about koth game?

[nova tide]

uhmm https://tryhackme.com/games/koth

more about that we are writing a blog post. you can check that out next week

[turbid narwhal]

can anyone do a writeup of this machine for me, i cant do anythin

[runic quail]

I was joining the game but looks like Naughty's there.

[turbid narwhal]

[covert vale]

Carnage machine going wrong

[turbid narwhal]

nyancat?

LMAOOOOO

@nova tide is rlyy prooo. hes a koth staff too, im pretty shocked

[nova tide]

nyancat?
@turbid narwhal yeah

[turbid narwhal]

22 Years old, 4th year BSCS.

COOL

...

[nova tide]

....

[turbid narwhal]

...

xD

[nova tide]

???

[gusty cradle]

Are you doxxing Naughty? 🧐

[nova tide]

i mean i have all(most) of my socials connected to THM/discord, so you don't really have to post that here 🤷‍♂️

Are you doxxing Naughty? 🧐
@gusty cradle wat? 👀

[gusty cradle]

#koth message
#koth message

Not like you have any opsec but still 😛

[nova tide]

[turbid narwhal]

Are you doxxing Naughty? 🧐
@gusty cradle next your turn?

[covert vale]

I'm nub

[hushed palm]

well played

[nova tide]

🙂

[covert vale]

Yeah my machine stucked while prev esc part

[turbid narwhal]

IM NOOB

[latent coyote]

[covert vale]

Sed lyf

[turbid narwhal]

0 POINTSS LOL

[covert vale]

Me also 0 points

[latent coyote]

unluqy

[turbid narwhal]

i gave up too early lol didnt try much

[latent coyote]

practice makes perfect

[covert vale]

Again u @nova tide

Come on

Only beginners

[marsh perch]

You were on last game right @covert vale ?

[covert vale]

Yeah .my first match

[marsh perch]

Same here

[turbid narwhal]

Are you doxxing Naughty? 🧐
@gusty cradle next your turn?

lmaooo you got scared @gusty cradle

[gusty cradle]

@turbid narwhal Way more experienced people than you have tried and failed miserably, you can try but you'll fail just like the other 9-10 people that tried to find me.

🙂

[hazy zodiac]

Get nyancated while playing with naughty

[latent coyote]

why bother try doxing someone?

makes you look like more of an idiot if you fail

[gusty cradle]

Doxxing isn't allowed in this discord anyway, osint is but doxxing someone can get you in a lot of trouble.

[covert vale]

@turbid narwhal I tired but I dont know how to play this game

[sharp parrot]

koth anyone?

https://tryhackme.com/games/koth/join/28f9b21f0b576a7728b398a6

[turbid narwhal]

im comin

[covert vale]

Wait I'm coming

Idk how to play

[turbid narwhal]

samee

[covert vale]

Idk patching vulns

[nova tide]

Way more experienced people than you have tried and failed miserably, you can try but you'll fail just like the other 9-10 people that tried to find me.
@gusty cradle i know about you

[sharp parrot]

anyone got user?

[boreal flare]

Spectator link?

[sharp parrot]

https://tryhackme.com/games/koth/11705

[boreal flare]

6 people wow..

[sharp parrot]

yea

im trying to get user idk where to begin from

[boreal flare]

Enumeration might help you?

[sharp parrot]

?

[boreal flare]

||I think webservers had something||

[sharp parrot]

||/webservers forbidden||

[covert vale]

Hahahah

[sharp parrot]

i got to login page with poetential pass and users but cant do anything

[boreal flare]

You already have 2 flags tho

[sharp parrot]

@covert vale are you the root?

[covert vale]

Yeah

[sharp parrot]

You already have 2 flags tho
@boreal flare from web

any hint plz?

[covert vale]

Lol

[boreal flare]

Maybe someone killed the webservers?

[sharp parrot]

im a beginner i want to be better

[covert vale]

Sed lyf:

[sharp parrot]

goku would be disappointed of you

[boreal flare]

Lol

[covert vale]

Og LOL

[sharp parrot]

plsssss

[covert vale]

I just del some flags so dont try

[sharp parrot]

i dont care about flags or winning i want to learn to be better

[covert vale]

[boreal flare]

I just del some flags so dont try
@covert vale ok now that's against the rules

[sharp parrot]

and i cant find anythingto get rce

yep its not allowed

[covert vale]

No its tmp u can get now

[sharp parrot]

?

[covert vale]

Flags r in the hidden table

[boreal flare]

Flags r in the hidden table
@covert vale try reading the rules for once

[covert vale]

Ok everything I set back dont worry

[sharp parrot]

bro have you done something?

||/backdoor|| dont work

i think thats just against the rules

[covert vale]

Lol I reset everything i done before

Coz I protect the hill now

[sharp parrot]

EVEN WEB ITSELF IS FORBIDDEN WTF

[covert vale]

I'm not touched web part

That's not in my list

[sharp parrot]

then idk whats going on

[covert vale]

Noice btw

[covert vale]

Anyone playing KOTH

I'm nub u can join my room

[hushed palm]

https://tryhackme.com/games/koth/join/7f61cabcdfa1035861d7d11e

17 min

[gusty cradle]

@gusty cradle i know about you
@nova tide

The only thing you know is the country and that's cuz your my friend

[nova tide]

:blobyes:

[stiff egret]

@flint cloud

https://tryhackme.com/games/koth/join/2218883c7e2c15e988b9f7ee

Hop in people

[lone wind]

do we have some good write up for koth?

[gusty cradle]

There's a repo on github 👀

I'm sure @stiff egret knows what I'm talking about 😁

Seeing as he made it

[lone wind]

hes all set for his koth now😂

[gusty cradle]

||https://github.com/holmes-py/King-of-the-hill||

[lone wind]

thank you ma1ware

[stiff egret]

!ban ma1 for posting spoiler links

[gusty cradle]

[lone wind]

😂😂

[flint cloud]

@flint cloud
@stiff egret is it still on?

[stiff egret]

let's create new

[flint cloud]

Yeaahh

[nova tide]

yeah

[stiff egret]

what yeah @nova tide

[flint cloud]

[nova tide]

let's create new
@stiff egret yeah

[stiff egret]

shooo away

it's a fight b/w me and cult

[nova tide]

i will watching from side lines

you guys can fight

[stiff egret]

👀

you gunna help him ik

[dusty canyon]

Which holmes will win

[stiff egret]

This

the original one

[dusty canyon]

Lmaoooo

[flint cloud]

[flint cloud]

For nairobi

[nova tide]

What are you hiding?

[stiff egret]

that is the smort question

[flint cloud]

Ima create the game

[tepid hornet]

Ima create the game
@flint cloud

Gib my notes fast

[flint cloud]

My notes?

👀

[tepid hornet]

Exactly

[stiff egret]

That is wrong and I'll sue you

I am original holmes

[flint cloud]

@tepid hornet

He is also playing

[tepid hornet]

Is that so

[stiff egret]

share the link, whoever is playing will join

[flint cloud]

Yes

[tepid hornet]

He is also playing
@flint cloud I'm a normal person, so I like to sleep at 12:00 in the morning and not play KOTH

[stiff egret]

I am taking offence in that line

[flint cloud]

https://tryhackme.com/games/koth/join/f65a0da1bc0ab1c730c5b12e

3 mins

[stiff egret]

what do you mean normal people doesn't play koth

[flint cloud]

@flint cloud I'm a normal person, so I like to sleep at 12:00 in the morning and not play KOTH
@tepid hornet What do you mean by normal person

[stiff egret]

which box is it?

[flint cloud]

Random

I am not a sub

[stiff egret]

I don't expect you to play fair, but eh

[dusty canyon]

LMAO THE ORIGINAL HOLMES

[flint cloud]

[tepid hornet]

All others are fake

[dusty canyon]

Lmao wth

There are 3 holmes

[flint cloud]

Fight for the title

[tepid hornet]

[dusty canyon]

Hehe

[flint cloud]

@tepid hornet join

[stiff egret]

noooooooooooooooooo

this has to stop now

[dusty canyon]

We are all holmes

[flint cloud]

What

[tepid hornet]

Green is sus

[dusty canyon]

Which green

[tepid hornet]

[nova tide]

[tepid hornet]

Which green
@dusty canyon Boooth of you

[dusty canyon]

Lmaoooo

[nova tide]

i'm real

he's fake

vote him out

[tepid hornet]

We got a new role ?

THM Staff

[stiff egret]

NOOOOOOOOOOOOOOOOOOOOOOOOOOOOOO

[nova tide]

wait did this tyler machine died?

[stiff egret]

no, he is playing dirty

[nova tide]

??

[stiff egret]

wget gone

@tepid hornet removing binaries is not allowed, since it is a private game I am not saying anything

[flint cloud]

He is not playing

[stiff egret]

(Also kicking you now would be double the fun)

[turbid narwhal]

what do you mean normal people doesn't play koth
@stiff egret
A normal person prolly doesn't play koth at 12 in the midnight

[tepid hornet]

@tepid hornet removing binaries is not allowed, since it is a private game I am not saying anything
@stiff egret bruh

I'm not even playing

You just woke me up from bed

[stiff egret]

well, if you can go back to your original names, I won't have trouble tagging you

[flint cloud]

[stiff egret]

(dont change)

and I'll continue pinging wrong ones

[flint cloud]

Whos the original one now

[stiff egret]

@stiff egret
A normal person prolly doesn't play koth at 12 in the midnight
@turbid narwhal um koth is to be played at 12 midnight, and that is a rule

[flint cloud]

[turbid narwhal]

Who's the real Holmes? Prolly @stiff egret

[stiff egret]

You are in luck, bee is offline, (da best mod) they would've kicked you imposters

@tepid hornet

@nova tide

[turbid narwhal]

@turbid narwhal um koth is to be played at 12 midnight, and that is a rule
@stiff egret
Imma go to bed, also I don't wanna be the only noob here so I'd rather sleep

You are in luck, bee is offline, (da best mod) they would've kicked you imposters
@stiff egret
😂😂👀

[stiff egret]

Reset, someone deleted main binaries.

[flint cloud]

not the main ones

[stiff egret]

[flint cloud]

one's which help me win

Aight just one sec of flag hunting

and Im out

[stiff egret]

you are already out

[flint cloud]

Im in

[runic quail]

👀

[tepid hornet]

WHO's pinging me

[stiff egret]

Reset, someone deleted main binaries.
@stiff egret told you

[flint cloud]

Ayo I didn't do this

[stiff egret]

(someone started deleting binaries, but a private game, who I am to say)

[flint cloud]

[stiff egret]

reset?

@fair adder

[flint cloud]

You changed sshd config

[stiff egret]

what no

[flint cloud]

Yes you did

[stiff egret]

nope

[flint cloud]

someone did

[stiff egret]

the box is as good as dead

we need to reset, no one is getting points

[flint cloud]

I am

Time to Reset brrr

[gusty cradle]

🧐

[sharp parrot]

:kewk:

i love this emoji

[stiff egret]

me too

[flint cloud]

Now you are using scripts

[stiff egret]

what? me? scripts? no never

[flint cloud]

Can See that

[stiff egret]

aww

[flint cloud]

I think I dont where to get the binary

[stiff egret]

cant make your user?

[flint cloud]

yea ofc

I see your cron

[stiff egret]

UM, 1. I got no crons
2. yeah that's mine

[flint cloud]

GG

[stiff egret]

[gusty cradle]

[flint cloud]

No @stiff egret

PLease NO

I'll frame that

Let me die in piece

[stiff egret]

[flint cloud]

I wanted to frame that

[stiff egret]

change the name back

and give your word you won't use names related to sherlock holmes

[flint cloud]

[stiff egret]

and I won't submit the remaining 5

you got 10 secs

[flint cloud]

dayum

No No no let me think

[stiff egret]

time

[flint cloud]

aight

aight

[stiff egret]

fast

what aight

[flint cloud]

I am changing that

[stiff egret]

and?

[stiff egret]

I respect your wishes to die in honor

[flint cloud]

You put me in a time paradox for a name

[stiff egret]

[flint cloud]

Can still frame it

that's close

[stiff egret]

I played by the rules in first half

[flint cloud]

huh

[stiff egret]

Deleting binaries

[stiff egret]

that's not allowed

[flint cloud]

you couldve said who you gonna tell?

[stiff egret]

well,

[flint cloud]

Miss me?

[stiff egret]

now that's a nice one

respect

[flint cloud]

[flint cloud]

I deleted wget , curl , nc

So you can't get the binary for root

[stiff egret]

Just don't do that again?
Removing binaries is eh poor defence

[flint cloud]

I won't if it's not necessary

[stiff egret]

take ss to send you after they ban

[flint cloud]

oooof

[stiff egret]

[flint cloud]

I WON'T (terribly shaking )
(screams) DONT BAN ME
(screams again) PLEASEE

[sharp parrot]

lol

[stiff egret]

I don't/can't ban

(I just you know report)

[flint cloud]

Moriarty never dies

[stiff egret]

wanna bet

[flint cloud]

https://tenor.com/bahKI.gif

Me tomorrow

Trying to access THM

[stiff egret]

[lapis lantern]

[sharp parrot]

are you playing koth rn?

[stiff egret]

who?

[sharp parrot]

you guys

[stiff egret]

I can join in if you like,

[nova tide]

I deleted wget , curl , nc
@flint cloud only?

[gentle hatch]

@stiff egret hey where did you find this ruleset? https://discordapp.com/channels/521382216299839518/695343809726513292/766376950238806076

[stiff egret]

It is an in-progress blog thats me and Naughty are writing. It is to be published sometime around next week. @gentle hatch

[gentle hatch]

Oh awesome, I have a bunch of questions about best practices for playing koth I'm sure will be answered there 😄

[covert vale]

@flint cloud only?
@nova tide

Halo discord anyone playing koth

[flint cloud]

https://tenor.com/bjk05.gif

@flint cloud only?
@nova tide yes

[boreal flare]

Anyone wanna play koth?

[covert vale]

@boreal flare shall we play KOTH

[boreal flare]

umm.. now i can't

maybe some other time

[stiff egret]

https://tryhackme.com/games/koth/join/ed8e0f06a5ab2c5ee9765a96

23 Minutes, Public.

[gentle hatch]

remind me to never play with meowless again lol

just spam killing shells kek

and editing sudoers file

[stiff egret]

(make the sudoers immutable)

Thank me later

[gentle hatch]

impossible when the foothold on this machine is the sudoers file

theres another but whatevs

[stiff egret]

🤷‍♂️

[quiet schooner]

impossible when the foothold on this machine is the sudoers file
@gentle hatch You're allowed to patch the machine, you know that right?

No rules about leaving one way in

[gentle hatch]

I understand that just seems like poor sportsmanship is all

if the machine is fully patched then what is the point of playing lmao

[quiet schooner]

To win.

You can always create a container to let them in to, give them false hope

Create a false king file etc

[gentle hatch]

ig just really annoying when people spam wall and kill shells is all

[stiff egret]

mostly all of those methods have their patches, just research about them

I left that game before it started

[sinful field]

https://tryhackme.com/games/koth/join/9472639851a03f43b950093d

starting in 5

[sly turret]

wtf Meowless king in under 1 min lol

[quiet schooner]

If it's suspicious, report it

[winged charm]

wtf Meowless king in under 1 min lol
@sly turret what’s the game id?

[sly turret]

https://tryhackme.com/games/koth/11795

but its fair he let me in ... i think he dont patched anything

oh he kills shells -.-

[nova tide]

killing shells isn't against the rules..

(But not really a good thing to abuse it)

[sly turret]

ahh i dont care i lost but learned some new things 👍

anyone want to play another KotH

[fair adder]

meowless is really good

[sly turret]

https://tryhackme.com/games/koth/join/b81e113f252d07ae4e781194

[sly turret]

@rancid pewter gg

i found a way in 😄 but i cant get my name inside the king.txt

[rancid pewter]

@sly turret Only way to get your name in the king.txt was to reset the box. I only played for 2 minute to get my rootkit in. Anyway GG.

[dusty canyon]

This man and his rootkit man istg i still have ptsd from the last time i played with him

[fair adder]

https://tryhackme.com/games/koth/join/c4bb2f2f554446e0277b715e

[gentle hatch]

good luck 🙂

[gentle hatch]

GG! Finally got root on Hogwarts lol

[fair adder]

any one for a koth match ??

https://tryhackme.com/games/koth/join/8e0fa6c8a7c55c7f14872a1e

join join join

[fair adder]

@versed estuary

here is the link

https://tryhackme.com/games/koth/join/5a5bba1b353abd63a9609605

[versed estuary]

@fair adder thanks

[fair adder]

@versed estuary why didnt join ??

it expired

[versed estuary]

@fair adder 😬

[fair adder]

hey

actually

the code is this

<!-- Begin
function popUp(URL)
{
day = new Date();
id = day.getTime();
eval("page" + id + " = window.open(URL, '" + id + "', 'toolbar=0,scrollbars=1,location=0,statusbar=0,menubar=0,resizable=1,width=550,height=600');");
}
// End -->

@runic quail

and the page variable is set to tyler.thm:8080

[silk needle]

https://tryhackme.com/games/koth/join/db19bb027a16337e34640752

KOTH!

[runic quail]

What are you trying to do with this?

[fair adder]

i am trying to access a subfolder of the website

or a file

[tepid hornet]

You mean a subdomain ?

[fair adder]

no

[runic quail]

Quant's here.

[fair adder]

like

[tepid hornet]

What's a subfolder

[fair adder]

http://10.10.147.202:8080/login.php

[runic quail]

He mean directory I guess.

[fair adder]

yeah

or a file

[tepid hornet]

Yes

And the problem you are facing ?

[fair adder]

whenever the popup function i run

it pops the website

tyler.thm:8080

and it doesnt load for me

i cant even curl it

[tepid hornet]

Have you added the website to your hosts file as DarkW suggested in #site-support

[fair adder]

how to ??

i will google it

wait a min

but what ip to set it to

??

koth ip changes everytime

[runic quail]

Use the one that is currently showing.

[fair adder]

@tepid hornet

sorry

[tepid hornet]

koth ip changes everytime
@fair adder Change it everytime the IP changes

[fair adder]

anyways

the koth ended

[tepid hornet]

You can just simple echo to the hosts file if you are on Linux

[fair adder]

i know

[tepid hornet]

It's a very ugly process for Windows

[fair adder]

echo "tyler.thm <ip>" >> /etc/hosts

i will use this from now

@silk needle i joined

[silk needle]

okie

My 1st KOTH was Tyler... I couldn't even get on the box... TwT

[fair adder]

its again tyler

XD

@tepid hornet it still doesnt work

[tepid hornet]

You are doing something wrong

More information would help

[fair adder]

Host addresses$

2 127.0.0.1 localhost$
3 127.0.1.1 USSR$
4 ::1 localhost ip6-localhost ip6-loopback$
5 ff02::1 ip6-allnodes$
6 ff02::2 ip6-allrouters$
7 tyler.thm 10.10.172.5$

this is my file

@tepid hornet

[tepid hornet]

It's the other way around

IP comes first

[fair adder]

ok

done

thanks

@silk needle what did you do ??

[silk needle]

what do you mean?

[fair adder]

after the koth

please explain me how did you get a flag

what was the vuln