#koth | TryHackMe | Page 49

fair adder Oct 17, 2020, 8:43 AM

#

everything like that

silk needle Oct 17, 2020, 9:00 AM

#

anyone getting trash?

fair adder Oct 17, 2020, 9:03 AM

#

nah

#

@hushed palm any hints for me ??

#

please

hushed palm Oct 17, 2020, 9:06 AM

#

yes, just bec you cant get into the machine doesnt mean the machine needs to be reset. i am just saying

fair adder Oct 17, 2020, 9:06 AM

#

man

#

the ports were geting closed

#

thats abnormal

marsh perch Oct 17, 2020, 9:07 AM

#

Can someone share link to watch game?

hushed palm Oct 17, 2020, 9:07 AM

#

yes bec this machine do this

fair adder Oct 17, 2020, 9:07 AM

#

thats why i resetted

hushed palm Oct 17, 2020, 9:07 AM

#

you need scan again

fair adder Oct 17, 2020, 9:07 AM

#

ok

#

literally

hushed palm Oct 17, 2020, 9:07 AM

#

no this machine close the port generally you need scan again and found new ports

fair adder Oct 17, 2020, 9:07 AM

#

now i am scanning every port in 1-9999

hushed palm Oct 17, 2020, 9:08 AM

#

yes -p- parameter is good

fair adder Oct 17, 2020, 9:08 AM

#

yeah

#

nmap -p 1-9999 10.10.206.5

#

@hushed palm just out of curiocity

marsh perch Oct 17, 2020, 9:08 AM

#

add --max-retries as you have limited time

silk needle Oct 17, 2020, 9:08 AM

#

done

fair adder Oct 17, 2020, 9:08 AM

#

is the ressurection stone the password of root ??

silk needle Oct 17, 2020, 9:08 AM

#

BTW rustscan is nice for quick scanning

fair adder Oct 17, 2020, 9:09 AM

#

is the ressurection stone the password of root ??
@fair adder @hushed palm

#

cause i got the ressurection stone

silk needle Oct 17, 2020, 9:10 AM

#

I've learnt the hard way that boxes may have services that aren't on right at the start or something and that it's always good to scan again 5-10 min after starting

fair adder Oct 17, 2020, 9:10 AM

#

this one closes ports

silk needle Oct 17, 2020, 9:10 AM

#

I use rustscan and get open ports seconds after starting the scan begins and get details <1 min later

fair adder Oct 17, 2020, 9:10 AM

#

first it had 22 , 9999 , 9220

marsh perch Oct 17, 2020, 9:11 AM

#

How much time left?

fair adder Oct 17, 2020, 9:11 AM

#

half an hour

#

man

#

this is taking long

marsh perch Oct 17, 2020, 9:12 AM

#

Ok

fair adder Oct 17, 2020, 9:12 AM

#

man

#

i am giving up

hushed palm Oct 17, 2020, 9:13 AM

#

i dont change anything you can try

fair adder Oct 17, 2020, 9:13 AM

#

is this a joke ??

#

man

#

there are only 2 ports open

#

22 , 9999

hushed palm Oct 17, 2020, 9:13 AM

#

no many more

#

use -p-

fair adder Oct 17, 2020, 9:13 AM

#

lets try

#

i generally use -A

#

cause it tells me if there are any tricks

hushed palm Oct 17, 2020, 9:14 AM

#

i do first "nmap -T4 -vv -p- <ip>" scan and after "nmap -A -p <ports> <ip>" it is work good

fair adder Oct 17, 2020, 9:14 AM

#

ohh

#

nicee

#

what does -p- mean ??

hushed palm Oct 17, 2020, 9:15 AM

#

all port

fair adder Oct 17, 2020, 9:15 AM

#

are you kidding me ??

#

it takes 30 mins for me to scan 1-9999

#

nvm

#

i will try

hushed palm Oct 17, 2020, 9:15 AM

#

65535 port scan itakes soma time but it have -vv parameter thats mean you can see found ports

fair adder Oct 17, 2020, 9:16 AM

#

ok

#

obviously this is hogwarts machine

#

and the real hogwartsz was hidden

#

so this machine will also be hidden

#

i am stupid

#

@hushed palm did you know that we are playing together for several days ??

silk needle Oct 17, 2020, 9:18 AM

#

I found p139,445 on the first scan

fair adder Oct 17, 2020, 9:18 AM

#

before i entered this server

hushed palm Oct 17, 2020, 9:18 AM

#

@fair adder yes i know i see you

silk needle Oct 17, 2020, 9:18 AM

#

BTW is ro0t here?

#

How did you keep killing my pty?

#

Thinking back, I should have used while with chattr on root.txt...

#

I found someone with linpeas & some repo for privesc and just deleted them

fair adder Oct 17, 2020, 9:20 AM

#

@hushed palm man that message of "this is how legends win" was awesome , but it annoyed me , cause it crashed my computer whenever you did it

#

but it was cool tho

silk needle Oct 17, 2020, 9:21 AM

#

BTW, for those of you struggling with the long time it takes to nmap all the ports, I use rustscan which returns all the open ports in a few seconds

fair adder Oct 17, 2020, 9:21 AM

#

ok

hushed palm Oct 17, 2020, 9:22 AM

#

actually i didnt write it, in that game i use a while script for write my name in king.txt and i left root, the other guy didnt find the script and he write it 😄

silk needle Oct 17, 2020, 9:22 AM

#

yeah I didn't notice when I lost king

fair adder Oct 17, 2020, 9:22 AM

#

so who broadcasted that message ??

silk needle Oct 17, 2020, 9:22 AM

#

what message?

fair adder Oct 17, 2020, 9:23 AM

#

asking Gev

silk needle Oct 17, 2020, 9:23 AM

#

I just tried dumping /dev/urandom on a random pts

hushed palm Oct 17, 2020, 9:23 AM

#

SoWhat. broadcasted that message and he broke the terminal several times

fair adder Oct 17, 2020, 9:23 AM

#

yeah

#

thats why i had to reset

silk needle Oct 17, 2020, 9:24 AM

#

Yeah I lost my terminal several times

#

Wait are we all talking about Tyler? I didn't notice a reset at all

fair adder Oct 17, 2020, 9:24 AM

#

SoWhat. broadcasted that message and he broke the terminal several times
@hushed palm actually that crashed my computer

hushed palm Oct 17, 2020, 9:24 AM

#

oh

fair adder Oct 17, 2020, 9:24 AM

#

even more ANNOYING

marsh perch Oct 17, 2020, 9:24 AM

#

Are we allowed to write script that automatically write to file every minute or every 2 minutes?

silk needle Oct 17, 2020, 9:24 AM

#

yes

fair adder Oct 17, 2020, 9:25 AM

#

its simple

#

in c

hushed palm Oct 17, 2020, 9:25 AM

#

@fair adder do you find the other ports?

fair adder Oct 17, 2020, 9:25 AM

#

nah

#

its still searching

silk needle Oct 17, 2020, 9:25 AM

#

Many of us use while [ 1 ]; do echo USERNAME > /root/king.txt; done

marsh perch Oct 17, 2020, 9:25 AM

#

Ok

#

You can also write in bash

#

I wasn't sure if we are allowed or not

silk needle Oct 17, 2020, 9:25 AM

#

add in chattr for more king time

fair adder Oct 17, 2020, 9:25 AM

#

man

silk needle Oct 17, 2020, 9:26 AM

#

once more than one user has root, it's just a race condition with while on king

hushed palm Oct 17, 2020, 9:26 AM

#

@marsh perch you can find this scripts in ps and you can kill so this need be allowed

marsh perch Oct 17, 2020, 9:26 AM

#

Yeh I used once

versed estuary Oct 17, 2020, 9:26 AM

#

@fair adder blobheart

marsh perch Oct 17, 2020, 9:26 AM

#

and named linpeas.sh

versed estuary Oct 17, 2020, 9:26 AM

#

blobheart

fair adder Oct 17, 2020, 9:27 AM

#

@hushed palm i thought that once i am root , i will make 5 more directories identical to /root and then see what happens to other players

hushed palm Oct 17, 2020, 9:27 AM

#

lol xd

silk needle Oct 17, 2020, 9:27 AM

#

If you watch JohnHammond do KOTH, you'll see some fun ways players mess with others and how while is inevitable

hushed palm Oct 17, 2020, 9:27 AM

#

@hushed palm i thought that once i am root , i will make 5 more directories identical to /root and then see what happens to other players
@fair adder this is very good xd

marsh perch Oct 17, 2020, 9:27 AM

#

king time is very less

#

Is it difficult machine guys?

fair adder Oct 17, 2020, 9:27 AM

#

it will be very awesome

#

but i didnt get root access

silk needle Oct 17, 2020, 9:28 AM

#

Tyler? TBH now that I know the solutions everything is super simple

#

I know only 1 route though

#

I used SSH as narrator

fair adder Oct 17, 2020, 9:28 AM

#

@hushed palm sowhat annoyed me sooooo much

#

that in 1 match

silk needle Oct 17, 2020, 9:28 AM

#

someone apparently got in as the other user

fair adder Oct 17, 2020, 9:28 AM

#

i got root

#

and killed ports

#

and changed the password of root

#

and ssh into it

hushed palm Oct 17, 2020, 9:29 AM

#

yes and he was kill all suid files too this is very bad

silk needle Oct 17, 2020, 9:29 AM

#

I kept getting kicked out but the routes in were untouched so I kept coming back

fair adder Oct 17, 2020, 9:29 AM

#

and kill the gateway i got

#

yeah

silk needle Oct 17, 2020, 9:29 AM

#

I used a SUID for root

#

didn't get nuked

fair adder Oct 17, 2020, 9:30 AM

#

if i meet sowhat again

silk needle Oct 17, 2020, 9:30 AM

#

BTW where do KOTH boxes come from? I'd like to practice some.

fair adder Oct 17, 2020, 9:30 AM

#

i will try hackin to his machine and formatting it

#

raging

#

still the nmap scan going on

#

waiting for it to finish

hushed palm Oct 17, 2020, 9:31 AM

#

do you use -vv parameter?

fair adder Oct 17, 2020, 9:31 AM

#

nah

hushed palm Oct 17, 2020, 9:31 AM

#

oh

fair adder Oct 17, 2020, 9:31 AM

#

i dont even know what that does

#

what does it do ??

hushed palm Oct 17, 2020, 9:32 AM

#

it is verbose

fair adder Oct 17, 2020, 9:32 AM

#

ok

hushed palm Oct 17, 2020, 9:32 AM

#

writeing found ports in same time

fair adder Oct 17, 2020, 9:32 AM

#

i know what it means

#

sorry

hushed palm Oct 17, 2020, 9:32 AM

#

you dont need wait for finsh scan

fair adder Oct 17, 2020, 9:32 AM

#

for being rude

boreal flare Oct 17, 2020, 9:32 AM

#

How long till the machine finishes?

fair adder Oct 17, 2020, 9:32 AM

#

15 mins

hushed palm Oct 17, 2020, 9:32 AM

#

16m

boreal flare Oct 17, 2020, 9:33 AM

#

Okki ping me for the next one

fair adder Oct 17, 2020, 9:33 AM

#

okie

#

waiting for the nmap scan

#

why nmap is soooooooo slow

marsh perch Oct 17, 2020, 9:34 AM

#

If you guys are playing next then I will also join

fair adder Oct 17, 2020, 9:35 AM

#

I haven't slept and it's 5 AM, same here

hushed palm Oct 17, 2020, 9:35 AM

#

nice

fair adder Oct 17, 2020, 9:48 AM

#

anyways

#

it ended

#

https://tryhackme.com/games/koth/join/7395ab307230bc30ef1aac6f

TryHackMe

TryHackMe | Hacking Training

An online platform for learning and teaching cyber security, all through your browser.

#

join

boreal flare Oct 17, 2020, 9:49 AM

#

Which one is it?

marsh perch Oct 17, 2020, 9:49 AM

#

change start time

fair adder Oct 17, 2020, 9:49 AM

#

it is a public one

marsh perch Oct 17, 2020, 9:50 AM

#

let's play private so we can start early

#

use random

fair adder Oct 17, 2020, 9:50 AM

#

ok

#

https://tryhackme.com/games/koth/join/867b391ef68b9def6373e83c

TryHackMe

TryHackMe | Hacking Training

An online platform for learning and teaching cyber security, all through your browser.

#

join

#

15 mins

#

i think we can wait 15 mins

marsh perch Oct 17, 2020, 9:51 AM

#

Ok

hushed palm Oct 17, 2020, 9:51 AM

#

https://tryhackme.com/games/koth/join/867b391ef68b9def6373e83c
@boreal flare @fair adder

TryHackMe

TryHackMe | Hacking Training

An online platform for learning and teaching cyber security, all through your browser.

fair adder Oct 17, 2020, 9:52 AM

#

already here, thanks gev!

hushed palm Oct 17, 2020, 9:52 AM

#

^^

fair adder Oct 17, 2020, 9:53 AM

#

just a fyi I've only participated in one other KotH so it's likely I won't get in easily 👀

boreal flare Oct 17, 2020, 9:54 AM

#

im in as well 😄

marsh perch Oct 17, 2020, 9:54 AM

#

🙂

fair adder Oct 17, 2020, 9:54 AM

#

thats the reason i cant find any public matched when i didnt came in this server

#

everyone here plays private matches

#

its good i came here

#

how do you get this tags of god and etc

#

??

#

sorry was trying to search for the command

#

!level

#

nope, well it's down to participation

#

if you complete rooms you get XP, that XP translates to levels

#

ok

#

thanks

boreal flare Oct 17, 2020, 10:03 AM

#

Good Luck people

marsh perch Oct 17, 2020, 10:03 AM

#

What's your name @boreal flare in Koth?

boreal flare Oct 17, 2020, 10:03 AM

#

lostayush

marsh perch Oct 17, 2020, 10:03 AM

#

Ok

boreal flare Oct 17, 2020, 10:08 AM

#

my vpn doesn't work cri

fair adder Oct 17, 2020, 10:08 AM

#

what ??

#

my nmap scan also didnt finish till now

#

@hushed palm salute to you

marsh perch Oct 17, 2020, 10:13 AM

#

Not sure where to look

#

both apps has larger attack surface

fair adder Oct 17, 2020, 10:13 AM

#

which both ??

marsh perch Oct 17, 2020, 10:14 AM

#

Oh wow Gev got king

fair adder Oct 17, 2020, 10:14 AM

#

yeah

marsh perch Oct 17, 2020, 10:14 AM

#

check open ports

fair adder Oct 17, 2020, 10:14 AM

#

samba is of no use

#

139 , 445 - trash

hushed palm Oct 17, 2020, 10:14 AM

#

samba just have flag

fair adder Oct 17, 2020, 10:14 AM

#

80 - contains a clue

#

22 - access point

#

8080 - invulnerable

#

thats it

marsh perch Oct 17, 2020, 10:15 AM

#

8009

#

may be

fair adder Oct 17, 2020, 10:15 AM

#

but it resets connection everytime we try to connect

#

i am quick at info

marsh perch Oct 17, 2020, 10:16 AM

#

Yes

fair adder Oct 17, 2020, 10:16 AM

#

what else remains ??

#

wanna try a reverse shell on 8009 ??

#

that might be the way

#

feels bad, I literally can't install mysql tools

#

sad

#

what ??

#

king changed

#

i am a fool if i still cant catch the vuln

marsh perch Oct 17, 2020, 10:19 AM

#

I am also not able to find anything

fair adder Oct 17, 2020, 10:21 AM

#

what if there is a free telnet nologin connection at a random port ??

#

ok

#

either i am stupid

#

or this machine is hard

#

ohhhhhh

#

3306

#

shit

blazing jackal Oct 17, 2020, 10:24 AM

#

yo

fair adder Oct 17, 2020, 10:24 AM

#

hi

blazing jackal Oct 17, 2020, 10:24 AM

#

4 koth in a row wtf

fair adder Oct 17, 2020, 10:24 AM

#

yeah

blazing jackal Oct 17, 2020, 10:24 AM

#

ur playing?

fair adder Oct 17, 2020, 10:24 AM

#

yeah

marsh perch Oct 17, 2020, 10:25 AM

#

mysql -u root -h 10.10.7.63 -p
Enter password:
ERROR 1130 (HY000): Host 'ip-10-13-5-13.eu-west-1.compute.internal' is not allowed to connect to this MariaDB server

fair adder Oct 17, 2020, 10:25 AM

#

@marsh perch any lead ??

marsh perch Oct 17, 2020, 10:25 AM

#

No

#

remote connection is not allowed

blazing jackal Oct 17, 2020, 10:25 AM

#

wut id?

marsh perch Oct 17, 2020, 10:25 AM

#

@hushed palm Any nudge?

fair adder Oct 17, 2020, 10:26 AM

#

if you're looking for a foothold, idk, but points-wise there's easy flags posted about

#

try looking at SMB and gobuster

blazing jackal Oct 17, 2020, 10:27 AM

#

this windows machine is fcing hard wtf

fair adder Oct 17, 2020, 10:27 AM

#

but man

#

nvm

#

this is confusing

#

ehh

#

how do you even connect to a samba server ??

marsh perch Oct 17, 2020, 10:29 AM

#

I tried smb

fair adder Oct 17, 2020, 10:29 AM

#

ok

#

i am stupif

#

I tried smb
@marsh perch you tryin confuse me ??

stiff egret Oct 17, 2020, 10:31 AM

#

While discussing the game is what actually makes it more fun, just try not to disclose/spoil machine related stuff, :)
You can always use ||<spoiler>|| to mark it as spoiler.

fair adder Oct 17, 2020, 10:31 AM

#

ok

marsh perch Oct 17, 2020, 10:31 AM

#

Not finding anything

fair adder Oct 17, 2020, 10:31 AM

#

we are stupid i think

marsh perch Oct 17, 2020, 10:31 AM

#

Are you sure there is nothing on ||8080||

fair adder Oct 17, 2020, 10:31 AM

#

yeah

marsh perch Oct 17, 2020, 10:32 AM

#

Because that application has larger attack surface

fair adder Oct 17, 2020, 10:32 AM

#

it is the ||web configuring ||

marsh perch Oct 17, 2020, 10:32 AM

#

if we find cred then we can get reverse shell

#

I still don't understand meaning of flag and ||robots.txt||

fair adder Oct 17, 2020, 10:33 AM

#

is there any ||default username of password|| of that ??

#

that application ??

#

thanks for the php upload, I didn't have one on hand :3

boreal flare Oct 17, 2020, 10:34 AM

#

lol

fair adder Oct 17, 2020, 10:34 AM

#

what is goin on ???

covert vale Oct 17, 2020, 10:34 AM

#

While discussing the game is what actually makes it more fun, just try not to disclose/spoil machine related stuff, :)
You can always use ||<spoiler>|| to mark it as spoiler.
@stiff egret <spoiler>

marsh perch Oct 17, 2020, 10:35 AM

#

Any nudge @boreal flare

#

at least which port

covert vale Oct 17, 2020, 10:35 AM

#

💩

boreal flare Oct 17, 2020, 10:35 AM

#

||webserver||

marsh perch Oct 17, 2020, 10:35 AM

#

lol

covert vale Oct 17, 2020, 10:35 AM

#

55007

fair adder Oct 17, 2020, 10:35 AM

#

what ??

marsh perch Oct 17, 2020, 10:36 AM

#

webserver is running on various ports

fair adder Oct 17, 2020, 10:36 AM

#

1337 port is open

#

letsss goooooo

covert vale Oct 17, 2020, 10:36 AM

#

Then try port forward tech :
And scan once again nmap

fair adder Oct 17, 2020, 10:37 AM

#

yessssss

#

ok

#

1337 is nginx

stiff egret Oct 17, 2020, 10:40 AM

#

@stiff egret <spoiler>
@covert vale huh?

marsh perch Oct 17, 2020, 10:42 AM

#

a lot of rabbit holes

boreal flare Oct 17, 2020, 10:42 AM

#

webserver is running on various ports
you asked for a nudge and i gave it to you .. rest is upto you 🙂

marsh perch Oct 17, 2020, 10:42 AM

#

Ok

fair adder Oct 17, 2020, 10:43 AM

#

@marsh perch any leads ??

#

i think they are patching it

marsh perch Oct 17, 2020, 10:44 AM

#

no

boreal flare Oct 17, 2020, 10:45 AM

#

well i'm not and i dont think gev is patching either

fair adder Oct 17, 2020, 10:45 AM

#

ok

#

areeeeee yr

#

i dont know anything abt it

#

this is hard

#

not patching either, tfw your binaries don't work smh

#

literally i am stupid

#

i am the stupidiest

#

of this discord group

#

this is your first KotH, it's not easy y'know

#

i am playing contantly doing koths from past 3 days

#

my service for people

#

PORT STATE SERVICE REASON
22/tcp open ssh syn-ack
53/tcp open domain syn-ack
80/tcp open http syn-ack
139/tcp open netbios-ssn syn-ack
445/tcp open microsoft-ds syn-ack
1337/tcp open waste syn-ack
3306/tcp open mysql syn-ack
8009/tcp open ajp13 syn-ack
8080/tcp open http-proxy syn-ack
8734/tcp filtered unknown no-response
9999/tcp open abyss syn-ack

#

"waste " lmfao

marsh perch Oct 17, 2020, 10:53 AM

#

oh man

fair adder Oct 17, 2020, 10:53 AM

#

i have even more

#

want it ??

marsh perch Oct 17, 2020, 10:53 AM

#

not sure

#

Unable to find anything

fair adder Oct 17, 2020, 10:54 AM

#

11007/tcp filtered unknown no-response
15170/tcp filtered unknown no-response
15300/tcp filtered unknown no-response
19494/tcp filtered unknown no-response
20822/tcp filtered unknown no-response
22344/tcp filtered unknown no-response
26045/tcp filtered unknown no-response
29613/tcp filtered unknown no-response
36627/tcp filtered unknown no-response
40354/tcp filtered unknown no-response
45816/tcp filtered unknown no-response
48064/tcp filtered unknown no-response
49929/tcp filtered unknown no-response
53431/tcp filtered unknown no-response
53803/tcp filtered unknown no-response
53954/tcp filtered unknown no-response
56537/tcp filtered unknown no-response
61757/tcp filtered unknown no-response

#

this is what i have

#

ahsgdjhasgdjhasgdjasd

#

what ??

#

I'm so close it's actually kinda painful

#

literally (figuratively) root

#

EUID rn

#

i am just chillin out

boreal flare Oct 17, 2020, 10:55 AM

#

i saw someone got root

fair adder Oct 17, 2020, 10:55 AM

#

cause i have nothin in mind now

marsh perch Oct 17, 2020, 10:55 AM

#

didn't get single flag

fair adder Oct 17, 2020, 10:55 AM

#

me too

#

yeah but I have no idea how to stablize this foothold

#

man

#

i need to study

#

computers and tryhackme

#

this is very hard

#

@boreal flare can i get a writeup ??

boreal flare Oct 17, 2020, 10:57 AM

#

i haven't made one

marsh perch Oct 17, 2020, 10:57 AM

#

I found user for ||WP||

fair adder Oct 17, 2020, 10:57 AM

#

https://tenor.com/view/omg-no-why-me-big-baby-ugly-gif-13752527

Tenor

boreal flare Oct 17, 2020, 10:57 AM

#

kekw

fair adder Oct 17, 2020, 10:58 AM

#

please

#

help

#

me

#

i

#

am

#

losin

marsh perch Oct 17, 2020, 10:58 AM

#

I also need help

fair adder Oct 17, 2020, 10:58 AM

#

and

#

i

#

cant

#

learn

#

anything

#

😭

boreal flare Oct 17, 2020, 10:59 AM

#

try doing some basic boxes first

#

koth is intermediate level

fair adder Oct 17, 2020, 10:59 AM

#

like ??

marsh perch Oct 17, 2020, 10:59 AM

#

Problem is rabbit holes

boreal flare Oct 17, 2020, 10:59 AM

#

am not saying that i am but ... knowing some stuff beforehand works wonders

#

like learn linux

#

easy ctfs

marsh perch Oct 17, 2020, 11:00 AM

#

I was able to get shells in 3-5 minutes for Koth

fair adder Oct 17, 2020, 11:00 AM

#

i know linux

#

i compete in easy ctfs

boreal flare Oct 17, 2020, 11:00 AM

#

and maybe watch some videos

fair adder Oct 17, 2020, 11:00 AM

#

i did a buffer overflow

boreal flare Oct 17, 2020, 11:00 AM

#

how are you still 0x1?

marsh perch Oct 17, 2020, 11:00 AM

#

I don't like submitting answers to THM questions

fair adder Oct 17, 2020, 11:00 AM

#

and i host my own irc server , ftp server

marsh perch Oct 17, 2020, 11:01 AM

#

specially for Metasploit

#

I avoid using metasploit

fair adder Oct 17, 2020, 11:01 AM

#

bruh

#

and i do everything

boreal flare Oct 17, 2020, 11:01 AM

#

wut ?

fair adder Oct 17, 2020, 11:01 AM

#

you own an irc, ftp, how are you 0x1?

boreal flare Oct 17, 2020, 11:01 AM

#

why not submit answers lmao

fair adder Oct 17, 2020, 11:01 AM

#

but i cant do a || fucking || box

boreal flare Oct 17, 2020, 11:01 AM

#

PG13 pls

fair adder Oct 17, 2020, 11:01 AM

#

i am useles

marsh perch Oct 17, 2020, 11:02 AM

#

It happens @fair adder

#

No need to demotivate yourself

short tusk Oct 17, 2020, 11:02 AM

#

~~pg13 means minimal swearing~~ @boreal flare

marsh perch Oct 17, 2020, 11:02 AM

#

Not all boxes are same

boreal flare Oct 17, 2020, 11:02 AM

#

uhh .. ok

fair adder Oct 17, 2020, 11:02 AM

#

i even complted 1 box

boreal flare Oct 17, 2020, 11:02 AM

#

have you got a scraper for pg13 i wonder jabba kekw

fair adder Oct 17, 2020, 11:02 AM

#

that spacejam one

#

and that fortune one

#

i completed all those machines

#

and still

#

STILL

marsh perch Oct 17, 2020, 11:04 AM

#

Alright guys few seconds

boreal flare Oct 17, 2020, 11:04 AM

#

oh .. dont worry you'll get there

hushed palm Oct 17, 2020, 11:04 AM

#

wp guys

fair adder Oct 17, 2020, 11:04 AM

#

i am a stupid person

marsh perch Oct 17, 2020, 11:04 AM

#

then may be we can ask someone

boreal flare Oct 17, 2020, 11:04 AM

#

GG people

fair adder Oct 17, 2020, 11:04 AM

#

g

#

g

#

you're not dumb for not knowing how to hack

#

it's a diff. skill set entirely

#

i am dumb

boreal flare Oct 17, 2020, 11:04 AM

#

exactly

fair adder Oct 17, 2020, 11:04 AM

#

i think

#

even @boreal flare says i am dumb

#

man

marsh perch Oct 17, 2020, 11:05 AM

#

Guys can I get help now

fair adder Oct 17, 2020, 11:05 AM

#

😭

boreal flare Oct 17, 2020, 11:05 AM

#

oh i wasn't

fair adder Oct 17, 2020, 11:05 AM

#

gg

boreal flare Oct 17, 2020, 11:05 AM

#

i was agreeing with "brackets" lmao

fair adder Oct 17, 2020, 11:05 AM

#

RESPECT - 10000000

#

I never really made a name so I just stuck w/ it

#

i hope there is a spacejam machine next ime

#

anyway how did you guys move from EUID to UID?

#

I tried setting up ssh for root 👀

#

didn't work, still asked for pass

#

@fair adder how did you get a shell ??

#

am I allowed to say?

#

dm me

#

next koth please

boreal flare Oct 17, 2020, 11:14 AM

#

do you guys wanna play hogwarts ?

fair adder Oct 17, 2020, 11:15 AM

#

sounds neat, I'll try

marsh perch Oct 17, 2020, 11:18 AM

#

Oh man

#

I feel very bad. I ignored that

boreal flare Oct 17, 2020, 11:18 AM

#

https://tryhackme.com/games/koth/join/0a15d08ed33f8de41c0d2903

TryHackMe

TryHackMe | Hacking Training

An online platform for learning and teaching cyber security, all through your browser.

fair adder Oct 17, 2020, 11:18 AM

#

i want to play hogwarts

boreal flare Oct 17, 2020, 11:18 AM

#

starts in 5

#

hogwarts

marsh perch Oct 17, 2020, 11:18 AM

#

https://discordapp.com/channels/521382216299839518/695343809726513292/766978100055244870

boreal flare Oct 17, 2020, 11:19 AM

#

brackets are you epoch ?

fair adder Oct 17, 2020, 11:19 AM

#

ye

marsh perch Oct 17, 2020, 11:19 AM

#

Which machine is this?

#

random?

fair adder Oct 17, 2020, 11:20 AM

#

is it allowed to say illegal stuff here ??

#

i wanna confess something

boreal flare Oct 17, 2020, 11:21 AM

#

the machine is hogwarts

#

and yes you're not allowed to say illegeal things here

fair adder Oct 17, 2020, 11:22 AM

#

||i leaked among us pc version for free and i talked with lawyers and its completely legal to use , this is what i wanna confess , i think it is not illegal , above message is just a jk , lmao ||

#

i hope you understand

#

I mean, you need to login to actually use it

boreal flare Oct 17, 2020, 11:23 AM

#

Lol

fair adder Oct 17, 2020, 11:23 AM

#

oh :v

#

I mean, you need to login to actually use it
@fair adder nah

#

box is up

#

its just a exe file

boreal flare Oct 17, 2020, 11:23 AM

#

I don't have rustscan installed lmao

fair adder Oct 17, 2020, 11:23 AM

#

is rustscan actually that much better?

boreal flare Oct 17, 2020, 11:24 AM

#

Well it is for initial enumeration

#

But the results are not consistent

fair adder Oct 17, 2020, 11:24 AM

#

better or worse than nmaps?

boreal flare Oct 17, 2020, 11:24 AM

#

Nmap is good

#

But takes too much time

fair adder Oct 17, 2020, 11:24 AM

#

huh

boreal flare Oct 17, 2020, 11:24 AM

#

Rust scan is just fast

#

And it invokes nmap on the ports that it finds

fair adder Oct 17, 2020, 11:25 AM

#

nmap has config files that I'd imagine you'd be able to implement into rustscan

#

though, as an official patch nmap probably wouldn't like it

boreal flare Oct 17, 2020, 11:25 AM

#

Som many f ing typos

fair adder Oct 17, 2020, 11:26 AM

#

can i post the free version here ??

#

or its not allowed ??

#

this box is so weird

#

nah

boreal flare Oct 17, 2020, 11:27 AM

#

No dont

#

Unless you wanna get banned

fair adder Oct 17, 2020, 11:27 AM

#

i am gonna speedrun now

#

to root of the box

boreal flare Oct 17, 2020, 11:28 AM

#

Well good luck

fair adder Oct 17, 2020, 11:32 AM

#

oh no it's potter triva

#

yeah

#

ressurection stone

#

neville

#

thanos

#

voldemort

boreal flare Oct 17, 2020, 11:33 AM

#

somethings wrong with the box i think

fair adder Oct 17, 2020, 11:33 AM

#

etc

#

thanos

#

somethings wrong with the box i think
@boreal flare nah

#

ah yes my favourite character

#

do you know harry potter didnt kill voldemort

#

I never saw it tbh

#

actually when thanos snapped

#

that time voldemort died

boreal flare Oct 17, 2020, 11:34 AM

#

kekw

#

wtf is going on

fair adder Oct 17, 2020, 11:35 AM

#

nothin

#

just distracting you

#

so that i get time for scanning the machine

boreal flare Oct 17, 2020, 11:36 AM

#

when i type || ls || it says illegal port command

fair adder Oct 17, 2020, 11:36 AM

#

yes it is

#

wait I just get an empty directory

#

cause you didnt use -A

#

nah

#

wait that's a thing?

boreal flare Oct 17, 2020, 11:37 AM

#

wait I just get an empty directory
@fair adder how ?

#

can i dm you brackets ?

fair adder Oct 17, 2020, 11:37 AM

#

i have the whole pathway to machine's root

#

"directory" meaning the login place itself xp

#

its my time now

#

aka I got into an empty FTP

#

there is nothing like that

#

aka I got into an empty FTP
@fair adder wait that ??

#

yeah

#

there are 5 ftp in this machine

#

what

#

only 1 contains the pass

#

sadly

#

yes it is

#

???

#

yes

#

its true

narrow fern Oct 17, 2020, 11:39 AM

#

Are u sure?

fair adder Oct 17, 2020, 11:39 AM

#

yeah

#

cmon man

#

i did that machine 5 times

boreal flare Oct 17, 2020, 11:39 AM

#

i'm so sad rn

fair adder Oct 17, 2020, 11:39 AM

#

@boreal flare if I didn't answer then yea, you can dm

boreal flare Oct 17, 2020, 11:39 AM

#

i wont play on fresh installs

fair adder Oct 17, 2020, 11:40 AM

#

it's just all harry potter triva 😭

#

@fair adder can you tell me the port of that ftp server ??

#

i will help you

#

surely i will help

#

port ??

narrow fern Oct 17, 2020, 11:40 AM

#

Port: 69

fair adder Oct 17, 2020, 11:41 AM

#

cmon

#

thats false

narrow fern Oct 17, 2020, 11:41 AM

#

Maybe it's 22.

#

try that

fair adder Oct 17, 2020, 11:41 AM

#

nah

#

its the ssh server

boreal flare Oct 17, 2020, 11:44 AM

#

lol'

marsh perch Oct 17, 2020, 11:48 AM

#

How to ignore unsafe port error

nova tide Oct 17, 2020, 11:48 AM

#

hogwarts?

marsh perch Oct 17, 2020, 11:49 AM

#

Yes

fair adder Oct 17, 2020, 11:49 AM

#

you're running HTTPS on a HTTP server lol

nova tide Oct 17, 2020, 11:49 AM

#

How to ignore unsafe port error
you gotta use google for that.. would be faster and more helpful.

fair adder Oct 17, 2020, 11:50 AM

#

It's the hogwarts box, I haven't enum'd any HTTPS

#

cmon

marsh perch Oct 17, 2020, 11:50 AM

#

getting for windows

fair adder Oct 17, 2020, 11:51 AM

#

i have everything

#

pass and user

#

but i have to find ssh port man

#

i got a shell

#

BOOM

boreal flare Oct 17, 2020, 11:54 AM

#

noice

#

good luck with getting king tho

#

😛

fair adder Oct 17, 2020, 11:54 AM

#

i get a flag and i win

#

what ??

#

shit

#

tfw john says: No password hashes loaded (see FAQ)

boreal flare Oct 17, 2020, 11:55 AM

#

mind sharing an ss ?

#

maybe better if dm

fair adder Oct 17, 2020, 11:55 AM

#

ss?

boreal flare Oct 17, 2020, 11:55 AM

#

screenshot

fair adder Oct 17, 2020, 11:56 AM

#

probably not rn

boreal flare Oct 17, 2020, 11:57 AM

#

okay

fair adder Oct 17, 2020, 11:58 AM

#

@boreal flare any clues ??

#

please

boreal flare Oct 17, 2020, 11:59 AM

#

you are on the box right

fair adder Oct 17, 2020, 11:59 AM

#

yeah

boreal flare Oct 17, 2020, 11:59 AM

#

what more clues do you need ?

fair adder Oct 17, 2020, 11:59 AM

#

why doesn't zydra have a requirements.txt file

boreal flare Oct 17, 2020, 11:59 AM

#

hide that prolly

#

@fair adder

fair adder Oct 17, 2020, 12:00 PM

#

ok

boreal flare Oct 17, 2020, 12:00 PM

#

try enumerating

fair adder Oct 17, 2020, 12:00 PM

#

how ??

boreal flare Oct 17, 2020, 12:00 PM

#

find sgid and suid files

#

try sudo -l

fair adder Oct 17, 2020, 12:00 PM

#

ok

#

ok

#

nothin

#

sudo -l doesnt work

boreal flare Oct 17, 2020, 12:01 PM

#

ok.. maybe

fair adder Oct 17, 2020, 12:01 PM

#

there are no suid binarues

#

linenum doesnt work

#

wdym?

boreal flare Oct 17, 2020, 12:02 PM

#

https://tenor.com/view/kanyewest-seriously-gif-5026763

Tenor

Are you serious right now?

▶ Play video

fair adder Oct 17, 2020, 12:02 PM

#

chmod +x linenum.sh

#

there is no script like linenum

boreal flare Oct 17, 2020, 12:03 PM

#

you haven't uploaded it ?

fair adder Oct 17, 2020, 12:03 PM

#

nah

#

. _.'

#

how to upload it ??

#

I uploaded it last KotH to /tmp

#

fire up a http server or send it via nc

marsh perch Oct 17, 2020, 12:05 PM

#

||Resurrection stone||

fair adder Oct 17, 2020, 12:06 PM

#

thanks a ton

marsh perch Oct 17, 2020, 12:07 PM

#

Stucked here

fair adder Oct 17, 2020, 12:07 PM

#

if we're doing another KotH can it not be happy potter themed?

#

@boreal flare any hints

#

which doesnt include that i already know

marsh perch Oct 17, 2020, 12:10 PM

#

Yes

boreal flare Oct 17, 2020, 12:10 PM

#

any more would be like giving you the answer

fair adder Oct 17, 2020, 12:10 PM

#

man please

#

YES I GOT ZYDRA TO WORK

#

atleast upload the linenum for me

boreal flare Oct 17, 2020, 12:11 PM

#

lol

fair adder Oct 17, 2020, 12:11 PM

#

i dont know how to upload

marsh perch Oct 17, 2020, 12:11 PM

#

ujse nc

boreal flare Oct 17, 2020, 12:11 PM

#

that i can

marsh perch Oct 17, 2020, 12:11 PM

#

*use nc

fair adder Oct 17, 2020, 12:11 PM

#

i forgot scp

marsh perch Oct 17, 2020, 12:11 PM

#

or http server

fair adder Oct 17, 2020, 12:11 PM

#

am i a fool to you

marsh perch Oct 17, 2020, 12:11 PM

#

Help me to get shell lol

#

I will upload all scripts for you

fair adder Oct 17, 2020, 12:11 PM

#

man

boreal flare Oct 17, 2020, 12:14 PM

#

ahh i see what the problem is

fair adder Oct 17, 2020, 12:14 PM

#

i give up

boreal flare Oct 17, 2020, 12:14 PM

#

i cant upload either

fair adder Oct 17, 2020, 12:14 PM

#

this is shit

#

i give up

#

technically i get 10 points cause i got a foothold

#

i cant upload either
@boreal flare any hints ??

#

if not i give up

boreal flare Oct 17, 2020, 12:15 PM

#

hop over to dms

fair adder Oct 17, 2020, 12:15 PM

#

ok

#

got root

boreal flare Oct 17, 2020, 12:17 PM

#

nice

marsh perch Oct 17, 2020, 12:17 PM

#

also found ftp

boreal flare Oct 17, 2020, 12:18 PM

#

my vm died 😢

fair adder Oct 17, 2020, 12:23 PM

#

gg

boreal flare Oct 17, 2020, 12:24 PM

#

GG people

fair adder Oct 17, 2020, 12:25 PM

#

i am sooooooooooooooooo angry at myself

marsh perch Oct 17, 2020, 12:27 PM

#

lol I didn't check ftp properly

fair adder Oct 17, 2020, 12:27 PM

#

i will kill myself

marsh perch Oct 17, 2020, 12:27 PM

#

I thought it's empty

fair adder Oct 17, 2020, 12:27 PM

#

fuck me

#

words

#

keep it PG13

#

kill me

#

you'll get muted, warned or banned if you keep it up btw

#

well i am ||13|| btw

#

XD

#

still, the rules do apply

#

lmfao

#

ok

#

had I had Zydra installed prior or if my John binary wasn't broken I might've gotten in sooner

#

||kill me and blast me off to venux ||

boreal flare Oct 17, 2020, 12:33 PM

#

why ?

#

burying wont do ?

fair adder Oct 17, 2020, 12:33 PM

#

no

#

i am deeserving of the last fragment of rock salt at venus

marsh perch Oct 17, 2020, 12:37 PM

#

||sudo|| no longer works

#

there is no way other than that

#

@hushed palm

fair adder Oct 17, 2020, 12:39 PM

#

the connection man

marsh perch Oct 17, 2020, 12:39 PM

#

reset guys

fair adder Oct 17, 2020, 12:40 PM

#

nah

#

the koth is over

marsh perch Oct 17, 2020, 12:40 PM

#

Nah there is another one

fair adder Oct 17, 2020, 12:40 PM

#

ok

marsh perch Oct 17, 2020, 12:40 PM

#

https://tryhackme.com/games/koth/11844

TryHackMe

TryHackMe | Hacking Training

An online platform for learning and teaching cyber security, all through your browser.

fair adder Oct 17, 2020, 12:40 PM

#

i am not playinh

#

bye

marsh perch Oct 17, 2020, 12:40 PM

#

But it seems gev patched that

nova stream Oct 17, 2020, 4:39 PM

#

https://tryhackme.com/games/koth/join/c1b7f1365ef175096bfde6ab

TryHackMe

TryHackMe | Hacking Training

An online platform for learning and teaching cyber security, all through your browser.

#

15 Minutes

sly turret Oct 17, 2020, 6:00 PM

#

hybr3d are you here

sly turret Oct 17, 2020, 6:15 PM

#

hello 😄 ... how did you send messages to my terminal in the last Koth round?

#

https://tryhackme.com/games/koth/join/b154c78573c32cbc86046a15

TryHackMe

TryHackMe | Hacking Training

An online platform for learning and teaching cyber security, all through your browser.

stiff egret Oct 17, 2020, 7:39 PM

#

https://tryhackme.com/games/koth/join/669efce2cb860852c6fa300a

TryHackMe

TryHackMe | Hacking Training

An online platform for learning and teaching cyber security, all through your browser.

stiff egret Oct 17, 2020, 8:06 PM

#

https://tryhackme.com/games/koth/join/fa92add31562c552a3fac62c

TryHackMe

TryHackMe | Hacking Training

An online platform for learning and teaching cyber security, all through your browser.

limpid flume Oct 17, 2020, 8:15 PM

#

holmes

stiff egret Oct 17, 2020, 8:16 PM

#

Hey

limpid flume Oct 17, 2020, 8:16 PM

#

Hey

gentle hatch Oct 17, 2020, 8:25 PM

#

whens this one starting?

stiff egret Oct 17, 2020, 8:25 PM

#

5 Minutes

limpid flume Oct 17, 2020, 8:25 PM

#

yup

stiff egret Oct 17, 2020, 8:30 PM

#

I'll leave

limpid flume Oct 17, 2020, 8:30 PM

#

why

#

its about to start

gentle hatch Oct 17, 2020, 8:30 PM

#

he made this lmao

#

i figured out how to root it yesterday holmes!

limpid flume Oct 17, 2020, 8:31 PM

#

lol

stiff egret Oct 17, 2020, 8:31 PM

#

i figured out how to root it yesterday holmes!
@gentle hatch noice

#

Rooting hogwarts is ez, getting foothold is hard

limpid flume Oct 17, 2020, 8:35 PM

#

I have no idea how to do this

stiff egret Oct 17, 2020, 8:36 PM

#

Enumerate, Use tools like rustscan.

limpid flume Oct 17, 2020, 8:37 PM

#

I found .... ports open

gentle hatch Oct 17, 2020, 8:39 PM

#

i finally figured out why i couldnt ssh into root too 😄

#

v sneaky

limpid flume Oct 17, 2020, 8:42 PM

#

aaaaaaaaaaaaahhhhhhhhhhhhhh

gentle hatch Oct 17, 2020, 8:44 PM

#

if you guys can enumerate usernames and the ssh port I left a backdoor with a very easy password

limpid flume Oct 17, 2020, 8:44 PM

#

oh

#

I found a potential username

gentle hatch Oct 17, 2020, 8:49 PM

#

nice! now try to ssh with that username

#

the pw is very short, less than 8 characters, should definitely be in a popular password cracking file

limpid flume Oct 17, 2020, 8:57 PM

#

I am trying to ssh into it but it does not work

gentle hatch Oct 17, 2020, 8:57 PM

#

probably the wrong username, try to think of what usernames would most likely be on a harry potter themed box

#

ssh is on a weird port

#

make sure you know how to ssh on a different port

limpid flume Oct 17, 2020, 8:59 PM

#

I found another potential username

nova tide Oct 17, 2020, 9:02 PM

#

https://tryhackme.com/games/koth/join/43fd5fcd76383032365cb24d

TryHackMe

TryHackMe | Hacking Training

An online platform for learning and teaching cyber security, all through your browser.

#

starting in one minute

gentle hatch Oct 17, 2020, 9:03 PM

#

hm havent done this one yet

#

glhf

sly turret Oct 17, 2020, 9:07 PM

#

https://tryhackme.com/games/koth/join/af8d86bc8c728f26d2bff89c

TryHackMe

TryHackMe | Hacking Training

An online platform for learning and teaching cyber security, all through your browser.

sly turret Oct 17, 2020, 10:03 PM

#

@nova tide did you patched something

gentle hatch Oct 17, 2020, 10:04 PM

#

gg

nova tide Oct 17, 2020, 10:04 PM

#

No

gentle hatch Oct 17, 2020, 10:04 PM

#

I had root but couldnt do much lmfao

nova tide Oct 17, 2020, 10:04 PM

#

i'm in 3 games rn.. not sure which one you talking about

sly turret Oct 17, 2020, 10:04 PM

#

ohh nvm ... im stupid :D:D

#

forget to write sudo before the command 😄

nova tide Oct 17, 2020, 10:33 PM

#

ok so no one even got a shell yet on hogwarts.. why would reset it???

fair adder Oct 17, 2020, 10:48 PM

#

@nova tide good game

nova tide Oct 17, 2020, 10:49 PM

#

🙂

fair adder Oct 17, 2020, 10:49 PM

#

my friend was deleting my shells

nova tide Oct 17, 2020, 10:49 PM

#

ooh

#

rip

fair adder Oct 17, 2020, 10:49 PM

#

and I couldn't catch a flag

#

rip 😞

#

someone deleted the end directory too i think

nova tide Oct 17, 2020, 11:12 PM

#

public game starting in 2 minutes

#

https://tryhackme.com/games/koth/join/6abf2bd94f11e05c090ed8a3

TryHackMe

TryHackMe | Hacking Training

An online platform for learning and teaching cyber security, all through your browser.

nova tide Oct 18, 2020, 12:03 AM

#

ok who is that meow guy again?

#

in my koth match

fair adder Oct 18, 2020, 12:11 AM

#

https://tryhackme.com/games/koth/11872

TryHackMe

TryHackMe | Hacking Training

An online platform for learning and teaching cyber security, all through your browser.

nova tide Oct 18, 2020, 12:13 AM

#

That's a spectator link, you have to share invite link

blazing jackal Oct 18, 2020, 12:13 AM

#

https://tryhackme.com/games/koth/join/9534fe509c14e8ade41f5a6a

TryHackMe

TryHackMe | Hacking Training

An online platform for learning and teaching cyber security, all through your browser.

#

@nova tide

#

im in

#

hogwarts machine was ez, but privesc....

nova tide Oct 18, 2020, 12:14 AM

#

which user you used to privesc?

blazing jackal Oct 18, 2020, 12:15 AM

#

sadsalkd only www

#

the default

#

of php webshell

#

idk how to escalate

nova tide Oct 18, 2020, 12:16 AM

#

soo for now you only have a shell on it?

blazing jackal Oct 18, 2020, 12:17 AM

#

im in another game bruh. 16min to start

#

only remebering

#

i played with u

#

demoni386

nova tide Oct 18, 2020, 12:17 AM

#

ooh my bad i forgot

#

i was in like 3-4 games at the same time 😄

blazing jackal Oct 18, 2020, 12:17 AM

#

fjksabhdjfbs

#

wtf meowless joined

#

shit

nova tide Oct 18, 2020, 12:18 AM

#

~~He gonna leave now~~

fair adder Oct 18, 2020, 12:18 AM

#

meowless is really good

gentle hatch Oct 18, 2020, 12:19 AM

#

he is sus

fair adder Oct 18, 2020, 12:19 AM

#

sometimes he get king in 1 second

quiet schooner Oct 18, 2020, 12:19 AM

#

@blazing jackal Please keep it safe for work.

blazing jackal Oct 18, 2020, 12:19 AM

#

@quiet schooner sorry

fair adder Oct 18, 2020, 12:19 AM

#

@blazing jackal Please keep it safe for work.
@quiet schooner please

quiet schooner Oct 18, 2020, 12:19 AM

#

Also, they can't read your messages as they're banned here.

blazing jackal Oct 18, 2020, 12:19 AM

#

meowless is banned?

#

why?

gentle hatch Oct 18, 2020, 12:20 AM

#

he was talking about doing illegal stuff in his country iirc

quiet schooner Oct 18, 2020, 12:20 AM

#

Plus the toxicity.

blazing jackal Oct 18, 2020, 12:20 AM

#

hmm, cringe

gentle hatch Oct 18, 2020, 12:20 AM

#

so i seriously doubt he plays koth clean, people seem to always complain about it, just plays like a jerk

quiet schooner Oct 18, 2020, 12:21 AM

#

Report them if so

blazing jackal Oct 18, 2020, 12:22 AM

#

want see he solve some HTB machine

#

freacrin hard

#

btw if anyone wants to join, 9min https://tryhackme.com/games/koth/join/9534fe509c14e8ade41f5a6a

TryHackMe

TryHackMe | Hacking Training

An online platform for learning and teaching cyber security, all through your browser.

nova tide Oct 18, 2020, 12:46 AM

#

Can you guys please not spam reset??

blazing jackal Oct 18, 2020, 12:47 AM

#

bruh

#

meowless regenerated ssh

#

@nova tide

nova tide Oct 18, 2020, 12:47 AM

#

okk soooo?

blazing jackal Oct 18, 2020, 12:47 AM

#

im sad

nova tide Oct 18, 2020, 12:47 AM

#

soo you spam reset?

blazing jackal Oct 18, 2020, 12:48 AM

#

nn

#

no

#

i aint reseted

fair adder Oct 18, 2020, 12:50 AM

#

isn't me

nova tide Oct 18, 2020, 12:50 AM

#

well someone is spamming the reset button just because they don't have ashu id_rsa access anymore..

blazing jackal Oct 18, 2020, 12:50 AM

#

bruh

fair adder Oct 18, 2020, 12:50 AM

#

yes

nova tide Oct 18, 2020, 12:50 AM

#

4 resets in 20 minutes......

blazing jackal Oct 18, 2020, 12:50 AM

#

somenone hacked me

#

i have been nyaned

nova tide Oct 18, 2020, 12:51 AM

#

Please don't reset now

fair adder Oct 18, 2020, 12:53 AM

#

kkkkkkkkkkk

blazing jackal Oct 18, 2020, 1:17 AM

#

wtf someone deactivated all the socks

blazing jackal Oct 18, 2020, 1:33 AM

#

gg

#

someone killed my ssh like 8900 times

nova tide Oct 18, 2020, 1:34 AM

#

ok i realllllyyyy don't wanna say something.. but please don't spam reset when one way is patched.. pleaseeeeeeeeeeeeeeeeeeeeeeeeeee

#

Bye

fair adder Oct 18, 2020, 3:15 AM

#

oh boy my favourite type of player, the type that weaponizes the reset button

#

they're probably worse than people who DoS HTB boxes

searchsploit apache

fair adder Oct 18, 2020, 5:54 AM

#

https://tryhackme.com/games/koth/join/ea5dfb1c3e51865934d5f250

TryHackMe

TryHackMe | Hacking Training

An online platform for learning and teaching cyber security, all through your browser.

turbid narwhal Oct 18, 2020, 12:17 PM

#

Anyone for koth?

#

Or I need to play w myself

#

https://tryhackme.com/games/koth/join/a282b6ed4b89a37f2be19630

TryHackMe

TryHackMe | Hacking Training

An online platform for learning and teaching cyber security, all through your browser.

fair adder Oct 18, 2020, 1:13 PM

#

hi

dreamy rune Oct 18, 2020, 1:14 PM

#

hi

fair adder Oct 18, 2020, 1:15 PM

#

anyone wanna play koth ??

dreamy rune Oct 18, 2020, 1:18 PM

#

im in a game. Is going sooo slow

#

i cant even acces the webpage

fair adder Oct 18, 2020, 1:25 PM

#

@hushed palm why

#

why you have to kill my terminal ??

#

i got root shell

#

hehehehehe

hushed palm Oct 18, 2020, 1:27 PM

#

xd

fair adder Oct 18, 2020, 1:27 PM

#

you failed at your work

#

yessssssssss

#

even tho i entered late

hushed palm Oct 18, 2020, 1:28 PM

#

why you have to kill my terminal ??
@fair adder i am sorry i have 53m king time and i didnt want to lose this xd

fair adder Oct 18, 2020, 1:28 PM

#

ok

#

its okay

#

next koth ??

hushed palm Oct 18, 2020, 1:28 PM

#

i am here

fair adder Oct 18, 2020, 1:29 PM

#

you used ||application.zip|| ??

#

to get root ??

hushed palm Oct 18, 2020, 1:29 PM

#

how did you make this spoiler thing

fair adder Oct 18, 2020, 1:30 PM

#

|| <spoiler> ||

hushed palm Oct 18, 2020, 1:30 PM

#

i was use ||nfs||

#

ok xd

fair adder Oct 18, 2020, 1:30 PM

#

| spoiler here |

#

like that

#

just || both side

hushed palm Oct 18, 2020, 1:31 PM

#

oh ok thank you

fair adder Oct 18, 2020, 1:31 PM

#

welcome

#

next koth ??

hushed palm Oct 18, 2020, 1:31 PM

#

i am waiting for url

fair adder Oct 18, 2020, 1:31 PM

#

you used that zip to get root ??

#

ok

#

https://tryhackme.com/games/koth/join/d219cfd19f876f436a71689e

TryHackMe

TryHackMe | Hacking Training

An online platform for learning and teaching cyber security, all through your browser.

hushed palm Oct 18, 2020, 1:32 PM

#

no i use a suid file: xargs

fair adder Oct 18, 2020, 1:32 PM

#

no

#

to log in

#

no i use a suid file: xargs
@hushed palm are you stupid ??

#

||fortuna was allowed to run any command with sudo ||

hushed palm Oct 18, 2020, 1:33 PM

#

i said to log in i was use nfs and you ask that again and i think you asked for priv esc 😄

fair adder Oct 18, 2020, 1:33 PM

#

i got fortuna

hushed palm Oct 18, 2020, 1:33 PM

#

i was use nfs

#

i dont use fortuna

#

i use hermes user

fair adder Oct 18, 2020, 1:33 PM

#

ohh

#

ok

#

actually i got the creds of fortuna in a zip file

hushed palm Oct 18, 2020, 1:33 PM

#

i know in 3333 port

fair adder Oct 18, 2020, 1:33 PM

#

yeah

#

it was easy

#

very easy

hushed palm Oct 18, 2020, 1:34 PM

#

yes bec i was add all sudo priv for fortuna 😄

fair adder Oct 18, 2020, 1:34 PM

#

i still wonder why other people didnt get i ?

#

yes bec i was add all sudo priv for fortuna 😄
@hushed palm so you added sudo perms to fortuna ??

hushed palm Oct 18, 2020, 1:34 PM

#

i think they gave up quickly

fair adder Oct 18, 2020, 1:35 PM

#

ok

hushed palm Oct 18, 2020, 1:35 PM

#

yes bec no one come

fair adder Oct 18, 2020, 1:35 PM

#

ohh

#

but i came then

#

and it became your mistake

#

hehehehe

#

🙂

hushed palm Oct 18, 2020, 1:35 PM

#

yes but 5 minutes before 😄

fair adder Oct 18, 2020, 1:35 PM

#

yeah

#

anyways

#

i think pico binary was allowed to run as sudo

#

by default

#

Bella Ciao - ORIGINALE

fair adder Oct 18, 2020, 2:00 PM

#

man

#

@hushed palm i got ashu's shell btw

#

why the heck you disconnected me

#

??

hushed palm Oct 18, 2020, 2:04 PM

#

i have my own shell

fair adder Oct 18, 2020, 2:05 PM

#

man

hushed palm Oct 18, 2020, 2:05 PM

#

i am realy i didnt do this for you

fair adder Oct 18, 2020, 2:05 PM

#

you killed my terminal

hushed palm Oct 18, 2020, 2:05 PM

#

no i am not

#

i would say if i did

fair adder Oct 18, 2020, 2:05 PM

#

Connection to 10.10.XXX.XXX closed by remote host.

#

and its not connecting

hushed palm Oct 18, 2020, 2:06 PM

#

we have 1 player too in here

fair adder Oct 18, 2020, 2:06 PM

#

someone resseted

hushed palm Oct 18, 2020, 2:06 PM

#

yes

fair adder Oct 18, 2020, 2:06 PM

#

i didnt know

#

any hints??

hushed palm Oct 18, 2020, 2:07 PM

#

look at file sharing services

fair adder Oct 18, 2020, 2:07 PM

#

man

#

i got ASHU'S SHELL

#

how to get root ??

#

i mean

#

hints

#

i got 1 more point

#

yesssssssss boi

#

man

#

@hushed palm any hints to get the password of ashu ??

#

i am in ashu shell

hushed palm Oct 18, 2020, 2:10 PM

#

you dont need any password

fair adder Oct 18, 2020, 2:10 PM

#

but for sudo man

#

i need password

hushed palm Oct 18, 2020, 2:10 PM

#

sudo have NOPASSWD feature

#

just try sudo -l

fair adder Oct 18, 2020, 2:10 PM

#

no

#

[sudo] password for ashu:

#

what now ??

short tusk Oct 18, 2020, 2:11 PM

#

enter Ashu's password

fair adder Oct 18, 2020, 2:11 PM

#

i dont have it

#

i am in its shell

short tusk Oct 18, 2020, 2:11 PM

#

Well then you can't

#

No password, no sudo

fair adder Oct 18, 2020, 2:12 PM

#

then how would i know

hushed palm Oct 18, 2020, 2:12 PM

#

oh the other user do this

#

he use passwd command

fair adder Oct 18, 2020, 2:12 PM

#

what ?

#

man

#

this is not fair

hushed palm Oct 18, 2020, 2:12 PM

#

ashu now have a password, did not exist before i was use that

fair adder Oct 18, 2020, 2:13 PM

#

shit

#

what now

#

no sudo

#

no enumeration

#

no root

#

@hushed palm now what ?

#

i should wait ??

hushed palm Oct 18, 2020, 2:40 PM

#

what a game

fair adder Oct 18, 2020, 2:41 PM

#

yeah

#

@hushed palm the shell communication is very confusing

hushed palm Oct 18, 2020, 2:44 PM

#

yes

turbid narwhal Oct 18, 2020, 2:45 PM

#

wtf???

fair adder Oct 18, 2020, 2:45 PM

#

you edited sudoer file

hushed palm Oct 18, 2020, 2:45 PM

#

are you sure, i could use and i am too not root

turbid narwhal Oct 18, 2020, 2:45 PM

#

idek how to

fair adder Oct 18, 2020, 2:45 PM

#

yes

#

i am sure

turbid narwhal Oct 18, 2020, 2:45 PM

#

im just a beginner i dont even know how to

fair adder Oct 18, 2020, 2:46 PM

#

how did you get root then ??

#

tell me the steps

#

you did got root

#

and editted the /root/king.txt file

#

now tell me

#

how did you get root ??

#

@turbid narwhal care giving any answers ??

turbid narwhal Oct 18, 2020, 2:48 PM

#

yeah sorry i wasnt here

#

i got ||id rsa from ftp anon login ||

#

then got into ashu

#

then sudo -l

fair adder Oct 18, 2020, 2:49 PM

#

and how did you get root ??

turbid narwhal Oct 18, 2020, 2:49 PM

#

||sudo su skidy||

fair adder Oct 18, 2020, 2:49 PM

#

man

boreal flare Oct 18, 2020, 2:49 PM

#

Umm better to tag those as spoilers

turbid narwhal Oct 18, 2020, 2:49 PM

#

changed user

fair adder Oct 18, 2020, 2:49 PM

#

dont lie

#

dont lie

#

please

#

dont lie

#

thats not the way you get root

boreal flare Oct 18, 2020, 2:50 PM

#

|| spoiler ||

turbid narwhal Oct 18, 2020, 2:50 PM

#

thats what i did

fair adder Oct 18, 2020, 2:50 PM

#

let me reverse search it

#

@turbid narwhal you cheater

hushed palm Oct 18, 2020, 2:50 PM

#

dude yes this a way 😄 you can use || sudo su skidy and skidy have git for sudo||

#

there is more way

fair adder Oct 18, 2020, 2:51 PM

#

she used this

turbid narwhal Oct 18, 2020, 2:51 PM

#

whats this?

fair adder Oct 18, 2020, 2:51 PM

#

i am sure

turbid narwhal Oct 18, 2020, 2:51 PM

#

idk my friend taugh me this machine

#

idk what youre talkin bout

fair adder Oct 18, 2020, 2:51 PM

#

dude yes this a way 😄 you can use || sudo su skidy and skidy have git for sudo||
@hushed palm man the git was available for sudo

boreal flare Oct 18, 2020, 2:51 PM

#

would you mind editing these to be spoilers

i got id rsa from ftp anon login
@turbid narwhal

fair adder Oct 18, 2020, 2:51 PM

#

in ashu shell also

turbid narwhal Oct 18, 2020, 2:52 PM

#

would you mind editing these to be spoilers
@turbid narwhal
@boreal flare idk how to do that

#

how to edit spoiler

boreal flare Oct 18, 2020, 2:52 PM

#

|| spoiler ||
..

fair adder Oct 18, 2020, 2:52 PM

#

@hushed palm who the heck changed the passwords then ??

#

and the sudoer file

#

??

#

its against rules i think

hushed palm Oct 18, 2020, 2:53 PM

#

sudoer file was normal for me but dont hink its against the rules to change

fair adder Oct 18, 2020, 2:54 PM

#

ok

#

but ashu sudo required password

#

how the heck am i supposed to get password if i get the only id_rsa ??

turbid narwhal Oct 18, 2020, 2:55 PM

#

idk u cant my friend didnt tell me that

fair adder Oct 18, 2020, 2:55 PM

#

someone changed the pass for sure

#

anyways

boreal flare Oct 18, 2020, 2:55 PM

#

someone changed the pass for sure
@fair adder umm..no you need to enumerate thoroughly

hushed palm Oct 18, 2020, 2:55 PM

#

password can change you need to do hack

turbid narwhal Oct 18, 2020, 2:56 PM

#

i didnt cause i dont know how to

fair adder Oct 18, 2020, 2:56 PM

#

how the heck am i supposed to get password if i get the only id_rsa ??
@fair adder ??

#

there is no possible way

hushed palm Oct 18, 2020, 2:56 PM

#

@fair adder umm..no you need to enumerate thoroughly
.

boreal flare Oct 18, 2020, 2:56 PM

#

@fair adder ??
@fair adder you need to learn that and not yell at people

fair adder Oct 18, 2020, 2:56 PM

#

ok

#

anyways

#

https://tryhackme.com/games/koth/join/8badcf385ef0215f252964f8

TryHackMe

TryHackMe | Hacking Training

An online platform for learning and teaching cyber security, all through your browser.

#

next koth

turbid narwhal Oct 18, 2020, 2:57 PM

#

im not playin w you

fair adder Oct 18, 2020, 2:57 PM

#

why ??

turbid narwhal Oct 18, 2020, 2:57 PM

#

cause youre blamein me for sth i didnt do

#

im good on my own :)

fair adder Oct 18, 2020, 2:58 PM

#

obviously if you are root then you can do anything

#

thats why

#

just leave it

#

i wont blame again

#

sry

turbid narwhal Oct 18, 2020, 2:58 PM

#

hmm next time maybe

fair adder Oct 18, 2020, 2:58 PM

#

ok

#

@hushed palm you coming ??

hushed palm Oct 18, 2020, 2:59 PM

#

no im tired, next time

fair adder Oct 18, 2020, 2:59 PM

#

ok

boreal flare Oct 18, 2020, 2:59 PM

#

Lol

fair adder Oct 18, 2020, 2:59 PM

#

@boreal flare you ??

boreal flare Oct 18, 2020, 2:59 PM

#

Umm.... Not me either

fair adder Oct 18, 2020, 2:59 PM

#

man i just asked man

#

where is the toxicity ??

boreal flare Oct 18, 2020, 3:00 PM

#

Nevermind

fair adder Oct 18, 2020, 3:00 PM

#

actually i did that machine 10 times

#

and i was sure that once this machine comes