koth

[last ether]

I need to re enumerate this machine properly

[dapper yew]

i had no power for the starting 2 mins .

sad life

[stiff egret]

:sed

[last ether]

I should have set up some persistence

😥

I hate tyler

[stiff egret]

Killing shells, patching starting in 30 secs

[last ether]

https://tenor.com/view/waiting-for-you-to-text-me-back-waiting-text-me-back-text-me-bored-gif-6153985

Me waiting for the final reset

[stiff egret]

smh, the machine was fine. Useless reset

[candid geode]

Did someone just do something to my ssh?

[dapper yew]

who reset just now

[stiff egret]

obv not me

[dapper yew]

this is insane

[stiff egret]

SMH, Damnit, I am not playing. Go win.
There was no need of reset, either time.
2 Resets back to back. And another on way with 1/3 resets done.

[dapper yew]

LOL

[last ether]

🤣

I hit the reset only once during the entire duration

And that was when I couldnt ping the machine in the vvery beginning

[stiff egret]

GG

[dapper yew]

i hit the rest when you said , waiting for the last reset .

didnt want to keep you waiting . 🥺

lol , someone pushed reset just now at the last minute

[last ether]

Good game people

🤣

[candid geode]

Remove?

[dapper yew]

thankie

wth

holmesssssss

[stiff egret]

if you read it, you read it

[dapper yew]

[stiff egret]

/var/.histoy/shell iirc

that's a very old rabbithole

[last ether]

I saw a crontab -r too

God that game was deadly

[stiff egret]

first idea out of the oldest book
if you give them something to kill, they won't look anywhere else

so you see the /var/.history/shell running

you kill it and keep looking at it

[dapper yew]

no but i actually saw it running

[stiff egret]

yeah it runs, and I get a shell from it

I just don't use that one

[dapper yew]

lol

someone killed my backdoors back to back

[stiff egret]

that was me

[dapper yew]

ah

[stiff egret]

used this ^

[dapper yew]

hmmm

holmes , may i dm ??

[stiff egret]

sure

[faint hatch]

gg to my KOTH group, fun box

[faint hatch]

You script it? 😏

[stiff egret]

Ofc

[dapper yew]

anyone KOTH , just ping me .

also i am exiting if its HOTH - medium .

[runic breach]

general question about koth machines, are all initial entry points also possible privesc points? or are some not just possible to privesc from?

[opal dove]

uh, all accounts have a privesc

well

I don't know about www-data, but there's usually a global privesc for all accounts

e.g. SUID binaries

[stiff egret]

It varies from machine to machine. Some footholds require you to pivot to another user and then get a priv esc to root.

[weary marten]

anyone here ? from the current koth game

is machine down or what ?

[wraith mirage]

wrong chan.

.

[hazy geode]

anyone up for a game

https://tryhackme.com/games/koth/join/713472ab0ef39ee482d438ee

?

[hazy geode]

reboot

I used this command

I used the makeImmutable command/function

[opal dove]

chattr?

[hazy geode]

opps

yeah

was it i or -i

?

[opal dove]

-i to remove it

+i to add the restriction

[hazy geode]

oh okay

thanks

[harsh obsidian]

anyone up for a game?

[harsh obsidian]

That awkward moment when you’re mid-game and a power outage hits

[dapper yew]

happens to me before 5 seconds when games about to start

[harsh obsidian]

Lol

[old igloo]

[candid geode]

https://tryhackme.com/games/koth/join/43a1aa30cf8c8260cdf184ea

https://tryhackme.com/games/koth/19715

[candid geode]

https://tryhackme.com/games/koth/join/19d33dd8ea91ef57f49c3f14
https://tryhackme.com/games/koth/19718

[fair adder]

@candid geode you are a genius

Lol

I'm anonysec

[dapper yew]

KOTH anyone ?

[candid geode]

My VM is taking forever to update

[dapper yew]

lol

https://tryhackme.com/games/koth/join/82d56a47f807459b6a07b987

https://tryhackme.com/games/koth/19720

[karmic cove]

I am in

@stiff egret plzz go easy on me 😭

[stiff egret]

ay just for fun match :)

[karmic cove]

Sure u go 😃

[dapper yew]

i wish its a hoth box

[karmic cove]

I didn't even got time to solve the medium box 😭

[dapper yew]

i solved it yeatrday ; lucky

if its medium , i wont stream

cuz its a secret trick 😉

i dont wanna spoil it

[karmic cove]

❤️

Ohh btw, I suck at windows machines

[candid geode]

I am in the middle of a koth game right now, and can't use my VM. This is scary.

[karmic cove]

easy box... but someone patched the service and kicked me out

fml

Woopsy

[fair adder]

@dapper yew you have all flags?

[dapper yew]

yep

[fair adder]

create a backdoor user

[dapper yew]

yea i forgot to do that

[candid geode]

I got my VM working again:
https://tryhackme.com/games/koth/join/a99e884ee6e7430e5a1e7b26

[fair adder]

and add in sudoers file

[nova tide]

why need to add in sudoers while you add it as a root user?

[nova tide]

someone changes the password for the user and it's their backdoor now 😄

[fair adder]

true

[candid geode]

3 minutes.

[stiff egret]

GG

[dapper yew]

nah

you won

i lost

smh

no GG for me 😭

BG ( my side )

[dapper yew]

[fair adder]

https://tryhackme.com/games/koth/join/e6f62ca3285d9b486d449a79

is private ^

[fair adder]

https://tryhackme.com/games/koth/19778 voicechat ?

[dapper yew]

Anyone Koth in Hoth , Ping me 😄

[dapper yew]

clearly not stream sniping abood

[ebon heron]

im not

🙂

[dapper yew]

your watching my stream , i can see it

[ebon heron]

shit

lol

ok im not watching

[dapper yew]

what have you done to the box

[ebon heron]

magic

do you love it

[dapper yew]

bruh . i mean something else

[ebon heron]

i didnt somthing else?!

i get normally

i didnt delete

[dapper yew]

you messed up with systemd and stuff

[ebon heron]

i swear to god no

its illegal

i didnt

[dapper yew]

bro , theres no else in the box

[ebon heron]

wait

how you are in

[dapper yew]

thats why you werent getting points

[dapper yew]

why would i tell you

[ebon heron]

no but

i make some magic

[ebon heron]

but you do somthing

[dapper yew]

this aint any magic boi

oh

[ebon heron]

i cant see you

not the king

another thing

[dapper yew]

bro , just see you dont have points

you messed up with systemd and koth.service

theres no king

[ebon heron]

i didint mess with them

ok

[fair adder]

.

[ebon heron]

.

@dapper yew

how did you do that?

[dapper yew]

https://tryhackme.com/games/koth/join/0bcff336b8679c3ee42e9bc

[ebon heron]

i cant change your name

[dapper yew]

https://tryhackme.com/games/koth/19802

[ebon heron]

can you tell me

[dapper yew]

nah bro

[ebon heron]

okk i will discover

[dapper yew]

🙂

[ebon heron]

i think its gg

it was great game

sniper

thank you

[dapper yew]

yup gg

[ebon heron]

🙂

[dapper yew]

why thanks ?

[ebon heron]

for beating me

🙂

lol

[primal ermine]

im in an empty koth game starting in about 10 minutes, does anyone wanna join? https://tryhackme.com/games/koth/join/1becf0c5d39a29d7e685c221

its my second time so no guarantee ill be any competition lol

[ebon heron]

unlucky

!vpnscript

[pearl glade]

TryHackMe

Use our VPN troubleshooting script to diagnose common issues!

https://github.com/tryhackme/openvpn-troubleshooting

From TryHackMe with ❤!

[wispy sequoia]

anyone want to come school me in my first KOTH?

https://tryhackme.com/games/koth/join/782470e1ef0cc839b4674f82

[wispy sequoia]

@fair adder GG

I gotta back out my hotspot connection is just way to laggy :/

[fair adder]

@wispy sequoia wp bro sorry i didn't see it was your first game

[wispy sequoia]

@fair adder np, yeah a bit hard for me to fully grasp the concept of KOTH I’m a beginner still lol

[harsh obsidian]

https://tryhackme.com/games/koth/join/4715173888a744dfedae9c6f

[harsh obsidian]

we were all beginners at some point

[fair adder]

https://tryhackme.com/games/koth/19869

oops

https://tryhackme.com/games/koth/join/928106e401a0bae4f3b7e5d0

[charred compass]

my super beginner has joined

[fair adder]

well this is taking quite a while isnt it

[charred compass]

it's interesting to do, especially with it being my first time

[fair adder]

what are you trying rn?

[charred compass]

ftp exploitation

[fair adder]

have u found the flag?

[charred compass]

nop this is my first ever KOTH I don't know where to look at all 🤣 I did find accounts though

[fair adder]

did u scan with nmap?

do -sV and look port 21

[charred compass]

I just did general -A -p 1-1000, is there a dif with the -sV?

[fair adder]

eh i dont think -A is a good idea in koth

it takes so long

and the output of it isnt that relevant

i usually do this - -sV -vvv

after rust

you can run -F first too

then scan again the ports it found with more info

check ftp, what does it allow?

[charred compass]

I entered with anonymous

dug the passwords/accs now I'm stuck

[fair adder]

did u ls -al?

it has a hidden flag

haha

[charred compass]

so that's what flags look like

[fair adder]

have u used hydra?

[charred compass]

yeah, that's what I was using to fetch the credentials

[fair adder]

where did u try?

[charred compass]

one of the accounts obtained from the ftp notes

[fair adder]

yeh but where

ssh? ftp?

[charred compass]

ftp

I'm in

[fair adder]

nice bro

i misstyped the username

in hydra

its been running for 20+ min

thats convenient

[charred compass]

well I'm not getting further in 4 minutes, that was a sweet KOTH

pretty cool introduction to it

[fair adder]

up for another one?

[charred compass]

I need to learn some more before digging into it

It would be pretty cool if we could actually see the people trying to break into the boxes when spectating, I initially clicked spectate then unintentionally joined the match so decided to give it a whiff

@fair adder thanks for all the help 👍 I'll look into some more KOTH during the week once I finish my last modules in the beginner learning path

[fair adder]

np ; )

[charred compass]

is there any recommendations on things I should focus on for KOTH?

seems the most straightforward thing would be the pentesting path and/or security path to path all the vulnerabilities once inside

[stiff egret]

Pretty much.
Going for king is the way. You can get flags afterwards. But if you own the king, you own the game.
And, yeah, finding vulns from inside the machine is much easier, so find one easy way to get root, and then find other ways from the inside, incase someone patches the easy method.

[nova tide]

Set some backdoors as soon as you get root.

[candid geode]

Is koth not working for any of you?

It says I am currently in a game, but I can't really seem to participate.

[last ether]

Is this something to be worried about?

[ebon heron]

yes i got the same error to

i was gona ask

[ebon heron]

i got this

[candid geode]

Yeah, very odd.

[dapper yew]

maybe just ping the staff , might help

[short tusk]

KoTH staff do not deal with the site.

[nova tide]

#site-bugs sounds like a better place for that?

[fair adder]

close one

[dapper yew]

woah

[fair adder]

last minute haha

[candid geode]

What a comeback.

I mean, it’s space jam. The results are usually pretty unpredictable.

[leaden kernel]

Two swedes playing koth atm, i'll be damned 🙂

Rare breed

Be nice to the swedes @fair adder

[sly turret]

https://tryhackme.com/games/koth/join/9fe118c98c277da4947ecde2
lvl:
intermediate

[sly turret]

jo @fair adder killing shells is fun huh ?

[fair adder]

ye

[sly turret]

😄

[fair adder]

🐣

[sly turret]

u want to try the H1 hard box ?

[fair adder]

hell no

[sly turret]

😄

why

[fair adder]

i know nothing about dockers

i need to study a bit first

okay hi

[blissful kettle]

Hey

[fair adder]

yo

can anyone explain this:?

or why its happenining

you need to go to your profile

and change your 'skill' level

thank you so much bro

[sly turret]

profile > about you > change lvl

[fair adder]

; ')

im rank 1 koth

of the month

kekw

wow

biggest achievement of my life

whens the next koth?

oh no

[dapper yew]

guys anyone for a koth /

[fierce mortar]

👀

[fair adder]

https://tryhackme.com/games/koth/19922 5 min

[hidden barn]

you guys rock!

[nova tide]

Nice 👍

[ebon heron]

https://tryhackme.com/games/koth/join/9d1ae0431e2f85fdcfa841e4 20 mins

[candid geode]

https://tryhackme.com/games/koth/join/2070e58991c4232b75a75ff0
https://tryhackme.com/games/koth/19941

[last ether]

@dapper yew Did you delete the tdurden user? 😅

I thought thats against the rules

[dapper yew]

by mistake 🙂

[last ether]

Well anyways good game

😉

[dapper yew]

when did you add your own user @last ether

kinda hard to figure that out

[last ether]

Lol

Just something for you to keep attacking

[dapper yew]

i dont know how tdurden was popping again and again

[last ether]

I am running a loop on my system

😅

[dapper yew]

loop for ssh on tdurden ? Heard it the very first time 😅

[last ether]

SSH

Or maybe I could be lying about it all! 😉

[dapper yew]

what shit 😂

anyway , gg

[last ether]

Yes!

😁

[dapper yew]

i was preoccupied with so much other stuff that did not play koth for bout a week or so .

cuz of this , my first match

second game , i was comfortable

[last ether]

And yet you were able to hold king for 3 mins 😁

[dapper yew]

haha

[last ether]

Oh I sent it that time

My network was bad

🤣

[fair adder]

@candid geode be gentle pls 🐣

[last ether]

Peace brother @dapper yew

[dapper yew]

@last ether may i dm 🙂

[last ether]

Yeah sure

[candid geode]

No patches then?

And its H1: Medium

[fair adder]

aah im not playing this one

[candid geode]

Neither am I.

[fair adder]

https://tryhackme.com/games/koth/join/2cc4c5227da2863c26069621

good thing that wasnt a real game

i forgot my vpn

[dapper yew]

can you send thelink

[candid geode]

I don't have it.

I didn't copy it to my clipboard when I left.

[dapper yew]

@fair adder do you have it ?

[candid geode]

I have the spectator link.

https://tryhackme.com/games/koth/19946

But I don't have the join link though.

[fair adder]

https://tryhackme.com/games/koth/join/078386d51d2243f85ac59785

@dapper yew

[candid geode]

How did you get it?

[fair adder]

xxx sent me

he's still in that room

[candid geode]

Ah, that makes sense.

[dapper yew]

yep , done

thanks

[fair adder]

np

[fair adder]

aaaah i hate this room

[candid geode]

The "hackers" room?

[fair adder]

yes

[candid geode]

I nearly lost trying to get nyancat on the machine

[fair adder]

hahahaha

i dont like this room because my internet is so bad

so hydra takes so much time

[stiff egret]

Maybe you just need to try the correct wordlist

[nova tide]

You can root the box within a minute

[fair adder]

ye, can you recommend me a good one?

you use

[nova tide]

rockyou ftw

[fair adder]

well thats the one i use

and hydra takes forever to find the password

[candid geode]

Sometimes it isn't your wordlist being bad. Sometimes the password gets changed.

[stiff egret]

Sometimes you need a subset of the primary reallly large wordlist

A very small subset

[fair adder]

nice ty for the help @stiff egret @nova tide @candid geode

[dapper yew]

what wordlist to be used for hackers .

[nova tide]

^

[dapper yew]

it takes hell lotta time

[nova tide]

Well it's up to you to figure out what you can do about it 😄

(I can root hackers in less than 10 seconds)

but autopwns are not allowed

[dapper yew]

you wanna play koth ?

[nova tide]

not really 😄

Kinda not playing koth anymore.

Need more time to study

[dapper yew]

so now focus on learning ?

[nova tide]

OSCP

[dapper yew]

study ? study what . like cybersec ?

[fair adder]

theres only one machine i can root in less than 10 seconds

my computer

and thats if i dont misstype my password

[candid geode]

The only machine I can root in under 10 seconds is space jam

[dapper yew]

all the machine are rootable in 10 seconds except hackers , hogwarts and h1:medium .

( according to me )

lol

[candid geode]

Nevermind what I just said.

[dapper yew]

😂

[candid geode]

I didn't realize there was the word "except"

[quiet schooner]

Hackers is rootable in 10 seconds if you know the secret

[dapper yew]

where have you hid it james . tell me tell me . just joking

[delicate cedar]

H1:medium too

[quiet schooner]

I'm excluding the fact I know a password to an ALL ALL sudo user on it

[dapper yew]

uh uh

uuuuuu

now i get it

[candid geode]

If we knew what all of the root passwords are, we could root easily.

[dapper yew]

okay lemme do that box again . i am kind of hinted what to do

[dapper yew]

i know one boxes's root pass

but unfortunately no root login

does any machines have rootlogin enabled ?

[candid geode]

Some do, but a lot don't.

[dapper yew]

which ones

been long time , i forgot

[candid geode]

Let me check.

I think like only 4 of the machine have root login enabled.

[last ether]

https://tryhackme.com/games/koth/join/a8fcbfa254f72dd0992db77a

5 mins

[last ether]

The machine is working perfectly fine

Don't understand why there are 2 resets already

[frank oracle]

Maybe because you have closed all the ports and entries to the machine :0

[last ether]

I havent

Scan it and see

[frank oracle]

oh god do i have to enter in the game for this

[last ether]

@frank oracle is your username Rodrous?

[frank oracle]

Am not in game lmao, am just guessing, i quitted a while ago

[last ether]

Oh ok

Cool

[urban vortex]

hmm i cant seem to connect to the machine it says host is down is any 1 else getting it

nvm

[candid geode]

Are you in my game?

[urban vortex]

i think so

lion is it?

[candid geode]

The host should be up, I am currently inside.

I also haven't patched anything.

[fair adder]

vpn?

[candid geode]

@fair adder I thought no killing shells...

[fair adder]

hmm who said that?

[candid geode]

Oh well

[fair adder]

bro why am i lagging so much wtf

[fair adder]

if youre still playing vote reset pls

i messed up ssh

[candid geode]

Alright.

[fair adder]

sorry im a dirty player

[candid geode]

I think you are the first player that kills my shells at that rate

Rematch? @fair adder
https://tryhackme.com/games/koth/join/aa4b2800e2b08da1b5ac8756

[nova tide]

bad blvckmetxl

[fair adder]

[candid geode]

It's lion again.

[fair adder]

i'm having a lot of fun.

what did you do to the upload form

are you serious

[ebon heron]

didi he put that cat gif

jiakang wining as always

[fair adder]

its ok now i know how he gets access so fast

[idle harness]

@candid geode why killing shells man D:

[candid geode]

Me? I am the one getting killed :/

[idle harness]

ah

my bad xD

[candid geode]

You are still the king somehow.

[idle harness]

yessir

[fair adder]

yo @ebon heron https://tryhackme.com/games/koth/join/6a59ac70fdadb9f0f177773a

[ebon heron]

i cant join rn

[fair adder]

k

[candid geode]

H1 Medium game, here is the invitation:
https://tryhackme.com/games/koth/join/2de21a25560973e80feea599

[signal hinge]

https://tryhackme.com/games/koth/join/0649dfffe9b0ddec62b464be

[fair adder]

helo 🐣

[graceful breach]

hi

hellow bokile

r u here?

[candid geode]

https://tryhackme.com/games/koth/join/20f0ab4fae9ff3914abecf8b
https://tryhackme.com/games/koth/20049
Starting in about 15 minutes.

[graceful breach]

@candid geode hi

[candid geode]

Hello.

[graceful breach]

im in 🙂

@candid geode what's up

[candid geode]

3 minutes left.

[graceful breach]

ooh

https://cdn.discordapp.com/emojis/803280439094673498.gif?v=1

[candid geode]

It is the hackers machine.

[graceful breach]

yea

brute : (

[candid geode]

Did you get in already?

I am taking longer than usual on this one.

[graceful breach]

no still bruting hydra

[graceful breach]

did u got

[candid geode]

I think the password isn't in my wordlist. Gotta use a backup plan.

[graceful breach]

password doesnt seems in note

[graceful breach]

i think we need to use rockyou

you got it right?

[candid geode]

Yes, went in through the backdoor

[graceful breach]

ooh nice

[candid geode]

Check the main page. I left something for you.

[graceful breach]

ok

[graceful breach]

lol

[candid geode]

Reload again.

[graceful breach]

i am joining ur party

[ebon heron]

jiakang changing web is illegal?

[candid geode]

There wasn't anything useful to be honest.

[ebon heron]

is it illegal

im asking

[candid geode]

I do know that it is illegal if you delete web stuff.

Like doing
rm -rf /var/www

[ebon heron]

if you change the content?

of the web

its allowed right?

[candid geode]

It doesn't say it in the rules, but after if you modify the content and the machine becomes totally unavailable, then that would be illegal.

[ebon heron]

i mean if you change that contenet at backdoor
at hackers

its not illegal

cuz you are not deleting you are only closing roads

am i right

[candid geode]

I changed the content of the main page.

Not backdoor, I don't mess with that.

[ebon heron]

i need to read the rules

[fair adder]

changing the content is ok but you can't delete it because then it would be pretty much the same as deleting a privesc vector binary instead of fixing its permissions or whatever

[last ether]

https://tryhackme.com/games/koth/join/ce2171d4b9f95b0851572d80

15 mins

[fair adder]

https://tryhackme.com/games/koth/join/6d1cc43a4b6132ae7a961982 starting in 10 min

[last ether]

Is the machine working?

[delicate cedar]

Ah, I thought it's gonna be linux machine

[last ether]

Or is should I renew my vpn config?

[fair adder]

it isnt working for me aswell

[delicate cedar]

https://tryhackme.com/games/koth/join/1ccd1002922a20475eff54fe 10min

[urban vortex]

i hope its an easy one XD

[fair adder]

i hope i dont get smashed

[last ether]

I hope it works

😅

[urban vortex]

if i get 1 flag ill be happy

[ebon heron]

why we have so much cats at the chat

[urban vortex]

lmao

[ebon heron]

i need to be ca ttooo

[fair adder]

cats only chat

everyone else get outta here

[ebon heron]

ok now its good

[last ether]

Can anyone access the machine?

Oh it looks like it

Cause @delicate cedar is already king 🤣

I realized I wasn't connected to my vpn 😥

[ebon heron]

my cat is better

[urban vortex]

i should stick to my courses XD

[last ether]

Strongly disagreee🤣

[ebon heron]

actullay we have same pp but the cats are diffrent

my cat try harder

your cat is playing minecraft

lol

[last ether]

Your cat is watching some NSFW content

[candid geode]

I saw your profile picture before, but as a gif.

[last ether]

Yeh

[idle harness]

@green axle gg?

[green axle]

Hmmm

[green axle]

What

[idle harness]

thought u left

so gg?

[green axle]

No i'm still here

[idle harness]

get king 😛 ?

[green axle]

I can no longer since you gave him all the permits, but I still took away the position of king

😬

[idle harness]

;-;

[green axle]

How did you manage to stop my process?

[idle harness]

gg

[dapper yew]

Koth on fire nowdays 😂

[fair adder]

helo 🐣

https://tryhackme.com/games/koth/join/9fd4c6e761ac5517d30f8d47 anyone up for a game 🐣

[ebon heron]

im sleeping

tomorrow

i will beat you

[quaint patrol]

https://tryhackme.com/games/koth/join/c44b2519f64b0a5b0591d406

[quaint patrol]

Come over to the KOTH voice channel to chat as we hack 🙃

[graceful breach]

https://tryhackme.com/games/koth/join/92bd4349314042989aaf6c85

5 min

[candid geode]

How do I get ssh to start working again?

Someone in my game may have terminated the ssh service and I can't get it to working.

Ah, no wonder it wasn't working.

[nova tide]

game id?

[candid geode]

https://tryhackme.com/games/koth/20116

[nova tide]

can you see who else is in the machine? their ip.

also screen shot for that cat killssh.sh file if possible.

use w to see their ip

[candid geode]

I have their ip, but I can't find the killssh.sh.

It isn't in /var/src

They do have a lot of scripts in /var/src.

[nova tide]

find / -name killssh.sh 2>/dev/null

[candid geode]

I'll try that.

[nova tide]

dm me their ip as well, screenshot if possible.

[nova tide]

DM me the machine ip, i can try to check.

[fair adder]

nice loop @nova tide

igiveup

🐣

[nova tide]

😄

oh that was you in fortuna..

killed my shell multiple times 😄

[fair adder]

i always forget

about the vpn

[nova tide]

rip

[fair adder]

im so mad

lol

[nova tide]

well i didn't patch anything after getting in anyways

[fair adder]

yea

but its kinda frustrating anyway

;/

[nova tide]

changed back the password for fortuna to the one you find in creds just in case if you had changed it

[dapper yew]

@graceful breach you can ask it here , people are helpful 🙂

[fair adder]

yo

can i report i player for reseting the machine without reason?

its not broken or anything but he keeps reseting it because i get root first

[nova tide]

Not really against the rules.

[fair adder]

rule 10 doesnt apply to this?

[nova tide]

🤷‍♂️

[fair adder]

[glacial void]

hello, any tips on offline windows machine?

[dapper yew]

Hint : ||its all metasploit ||

[nova tide]

Not all.

You can do it without metasploit as well.

[glacial void]

i'm curious how much koth is the same as real life hacking

[quiet schooner]

Not really similar

Seeing as people won't be hacking the same stuff to try and boot you out at every turn

[fair adder]

and run nyancat on your tty

[fair adder]

ok reseting the machine without reason isnt against the rules, but this is getting so annoying...

[winged charm]

if it is being abused it is actually against the rules and I suggest you report it here to the koth-staff or send an email to [e-mail]

[terse willow]

(Naughty said otherwise above, but I'm inclined to agree with you on this one Cry)

[winged charm]

Im just going off the rules but I really dont have any say here as Im no longer a staff member

[graceful breach]

🙂

Hellow guys , anyone knows how to execute our name to king.txt continously

[ebon heron]

you can use loops

bash loop

[graceful breach]

thanks 🙂

[fair adder]

may i dm you? @graceful breach

[ebon heron]

(^v^)

[graceful breach]

sure

[urban vortex]

@fair adder u wanna split the king XD

[graceful breach]

https://tryhackme.com/games/koth/join/23768a47d4bc0727eaed6bb4

15 min

[urban vortex]

im not getting any points while king ?

[graceful breach]

u are getting points if u becOme king

[urban vortex]

😦

[graceful breach]

WHY

[urban vortex]

now

im getting points

..

[fair adder]

i win for 1 minute

oops

2

[urban vortex]

why

didnt i get points

for 15 min

[fair adder]

idk i was wondering that too

i thought you messed up smth lol

[urban vortex]

ill get that first win oneday

[fair adder]

🐣 you never won?

[urban vortex]

did u write a script to keep changing king.txt ?

[fair adder]

no

i copy pasted it

[urban vortex]

oh

[fair adder]

because im a complete newbie on windows

[urban vortex]

i tried changing it couple times i thought u wrote a script for a moment XD

[fair adder]

lets hope for a linux machine

[urban vortex]

wait i have a question

did u get kicked out of ur session ?

previous ctf

coz i was trying something

[fair adder]

yes

[urban vortex]

ok it works

good to know XD

[fair adder]

i logged in as administrator

and svc_robotarmy (also in admin group)

[urban vortex]

yeah i saw them both

[fair adder]

how did you do that?

[urban vortex]

open task manager

users

u can see everyone connected to the pc

u can rightclick and signout

[fair adder]

k

i dont understand why it showed "youre not part of admins group" everytime before it kicked me out tho

[urban vortex]

idk

i tried deleting ur user so when u use rdp it doesnt work

i also dont know if that worked

[fair adder]

administrator?

[urban vortex]

no

svc

something

[fair adder]

not my user

i deleted yours

juba

[urban vortex]

no i hide it

[fair adder]

hm

[urban vortex]

wait are u sure u deleted mine ?

because everytime i go to users to check for new ones

mine was still there

[fair adder]

i ran net user juba /delete

and net user juba after

and it showed no user with that name

or smth like that

[urban vortex]

ooh nice so i hide it in time

XD

[fair adder]

lol

[urban vortex]

but u still can delete it

[fair adder]

idk i need to try some windows ctfs

so i learn more about it

[urban vortex]

i want to get better at shells but the room is very boring

not much activity more reading

https://tryhackme.com/room/introtoshells

[fair adder]

im not subscribed ;s

[terse willow]

@urban vortex not gonna get very far in this industry if you can't sit down and digest information, I'm afraid

[urban vortex]

i agree, its a habit that can be developed

[fair adder]

i personally love to just read stuff

but feel the need to put it to practice after

https://tryhackme.com/games/koth/join/9210854a0aa651eba60cbb8d 5 min

@urban vortex good luck

[urban vortex]

u2 my friend

[fair adder]

ugh i hate this room

everyone voting to reset

[graceful breach]

https://tryhackme.com/games/koth/join/c83abd1134379bd856d8017e

15min

[finite garden]

Hello guys is this legal?

[shrek@shrek ~]$ Connection to 10.10.246.114 closed by remote host.
Connection to 10.10.246.114 closed.

Guy just shuts down 22 port.

[urban vortex]

its okay to change port but not close it

[finite garden]

how i can report him

because right now i playing that game.

[urban vortex]

im playing with you too did you check if he changed it to another port ?

@finite garden its open

[finite garden]

yes Yes now 😄 When he make 325 points and he is king for 20min

ofc he will open 😄

and its closed again 😄

[finite garden]

PORT STATE SERVICE REASON
3306/tcp open mysql syn-ack ttl 63
8009/tcp open ajp13 syn-ack ttl 63
8080/tcp open http-proxy syn-ack ttl 63
9999/tcp open abyss syn-ack ttl 63
65432/tcp closed unknown reset ttl 63

[urban vortex]

[finite garden]

Its ok 🙂
Some people dont want to have fun playing koth 🙂

i wont be lazy to report him 🙂

[fair adder]

yo anyone? https://tryhackme.com/games/koth/join/1054b342ae62720bd7019fcf 4 min

[fair adder]

https://tryhackme.com/games/koth/join/65d5c970fb1be6ec36b0d02c anyone? 10 min

[fair adder]

https://tryhackme.com/games/koth/join/efe1b836c19e9255be012d66 10 min anyone?

[stiff egret]

Check pins, you'll see a msg for how to report info.

[finite garden]

Thanks i already did it 🙂

[stiff egret]

Also, sometimes, some players shift the ssh to a v. higher port, like, 60000 or something.

[finite garden]

Yes i know 🙂 but sometimes they just shut it down D: hahah

[stiff egret]

True that. Hence the report option.

[ebon heron]

big chance its the last port that random one but its close

[finite garden]

i try but its not

[ebon heron]

cuz its close

[finite garden]

Yes 🙂 so thats illegal stuff to doing on koth and i report that guy

[fair adder]

https://tryhackme.com/games/koth/join/39688cc9dbac5ee39321c8da anyone? starting in 2 min

[fair adder]

https://tryhackme.com/games/koth/join/1e560aff81d05b89c85d64ef starting in 8 min 🐣

[fair adder]

https://tryhackme.com/games/koth/join/79901ad13fb824720fbb3477 starts in 2 min 🐣

come play 🙂 🐣

nvm its h1:medium

[candid geode]

https://tryhackme.com/games/koth/join/087f6222795a32726b9885c1
I finally have time to play again.

[last ether]

https://tryhackme.com/games/koth/join/6a976375ac64c15455134055

Voice chat?

Does running tmux on zsh make it crash on Kali?

Cause it just logged me out of my system 😂

Anybody else face this issue?

[cerulean maple]

Nope

[last ether]

Well, it did for me

And that just cost me this game

😭

[candid geode]

Are you the one logging in with Bobba?

[last ether]

I cant even ping the machine

[candid geode]

10.10.237.81, it is up and running.

[last ether]

Not for me buddy

[candid geode]

Someone is also trying to get in the machine with the Bobba user.

[last ether]

It's alright. I will just reboot my vm

Have fun

[candid geode]

New Game:
https://tryhackme.com/games/koth/join/41c3631375acc5ad7af3956b

[last ether]

https://tryhackme.com/games/koth/20285

[nova tide]

You forgot to blue the ip in other lines 😅

[last ether]

I was only blurring my ip

🤣

I know I am connected to the THM network because tun0ip gives me my ip address

[fair adder]

yo anyone up for a game? https://tryhackme.com/games/koth/join/5374f358889434a03e918797

[last ether]

This game was terrible for me. Needed to enumerate the box again 😂. But these days everyone gets king in the blink of an eye 🤭

[last ether]

How long?

[fair adder]

15 min

[last ether]

Ok

I think I can join

[fair adder]

🙂 🐣

[fair adder]

5 min to start 🙂 join pls 🐣

nice

i forget about the vpn once again

koth was kinda dead yesterday

i missed killing shells 🙂

[last ether]

🤣

This one is nice

[fair adder]

what happened to ssh

lol

restart the machine?

nvm fixed

[fair adder]

aaaaa

wp @last ether

[last ether]

😁

Good game brother!

[fair adder]

but why do i always forget the vpn

its so annoying

😦

[candid geode]

What do you mean by forgetting the vpn?

[fair adder]

i forget to connect to the thm network

and i take a while to realize that

so i have a late start

[harsh obsidian]

Oh I've been there!

[candid geode]

Does it like automatically disconnect over time?

[ebon heron]

you always do it 🤣

[fair adder]

i reboot quite often tbh

my hardware is far from being good

lol

[candid geode]

Oh, reboot. That makes sense.

[ebon heron]

same

if i use orange it will run faster

[fair adder]

i might need some rgb stuff

to increase performance

🐣

[ebon heron]

🥚

[candid geode]

Players keep resetting the machine in my game. What should I do?

[nova tide]

send invite link here, i join so they might need more votes to reset

[candid geode]

https://tryhackme.com/games/koth/join/4f5ea0bbed55ddee965d2eb9

[last ether]

Someone is using this!

[stiff egret]

Send output of w

with ps aux| grep ssh

I'll get that person warned :)

[last ether]

They reset the machine

I suspect that ip

The user is Kalighost404

@stiff egret

[dapper yew]

no wonder what people can do just to win .

[stiff egret]

As I said, please post the outputs of bothw and ps aux|grep ssh in one screenshot

That way I can confirm who is breaking the rules

[dapper yew]

@last ether maybe remove that script so that it doesnt pass on

[stiff egret]

@nova tide ^

[candid geode]

KaliGhost always plays dirty. He was the one script-killing my space jam shells last time.

[last ether]

I see

First time I'm witnessing it

[ebon heron]

some people are playing to have fun other to kill shells.

[nova tide]

Looking into it 🙂

[fair adder]

afk in koth lol

[candid geode]

I found kalighost and his scripts again.

Hell, I managed to take him out before he got the time to run all of these.

killssh.sh just kills all ssh shells.

king.sh basically puts his name in king.txt
loop.sh downloads all of these files
love is the chattr binary
the rest is just self explanatory.

[stiff egret]

Anyone who wants to report someone, for running malicious script, please follow this:
-- w ; ps aux | grep <the script name you think is malicious>
So we can identify who is running the script.

In this case,
w ; ps aux | grep killssh

[candid geode]

I waited for him to run his scripts, but he didn't this time.

[last ether]

Sometimes the w doesn't give any results

[candid geode]

I do have the source code of the scripts, in which he has his ip and username.

[last ether]

Me too 😂

[stiff egret]

In those scenarios, it's really hard to identify without involving logs.
In that case, report whatever you get to the email provided in pins.

[last ether]

Hmm ok

[candid geode]

I got this:

[fair adder]

okay lets do this before blackmetal wakes up

[stiff egret]

@candid geode Using --forest with ps is full form of ps f

[fair adder]

https://tryhackme.com/games/koth/join/8cafbc31ca637fdd187c8c46 @fair adder @hazy zodiac

[candid geode]

I always do:
ps -eaf --forest

[stiff egret]

the problem in that screenshot is that I cannot verify the pts from that screenshot on which the script was running.

[gusty cradle]

10.4.23.250

[fair adder]

lets play

[stiff egret]

Yeah, f is shorthand for --forest

[fair adder]

how do i make a gif my pfp

[stiff egret]

can't be certain

[fair adder]

come faster it starts in 2:30 min

[stiff egret]

on thm or discord?

[hazy zodiac]

aye

[fair adder]

thm

[hazy zodiac]

les go

[candid geode]

Yeah, but I will have to play another game with him, because this one has ended.

[fair adder]

i think u can't evan

anymote

[stiff egret]

I don't know if you can anymore, it was once a bug.

[fair adder]

ahh

okay

[gusty cradle]

You could once, but it was removed

[fair adder]

i used it ¯_(ツ)_/¯

[candid geode]

I also can't play today anymore, I got work to do.

[fair adder]

look at us!

SHEEESH

[stiff egret]

been so long I've played.

[gusty cradle]

Which box are you doing? 👀

[fair adder]

shrek

[gusty cradle]

Ahh I think I have flags stored somewhere

[fair adder]

this my first time playing i look to play koth more

EYO

[fair adder]

heyyyyy 😉

remmeber that one time i gave you chips

it's not fair chuin is 0xD

[hazy zodiac]

me n00b

[fair adder]

i forgot everything

did I even have gobuster on this?

fo

do

20 SEC's

[hazy zodiac]

lets go

[fair adder]

im scared for some reaosn 🤣

don't forget to connect to openvpn

what how do i start

okay let me do that

okay what now

[stiff egret]

Scan the IP

enumerate for vulns

things that you do for regular boxes.

Bonus: Give the pinned article a read.

[fair adder]

okay thank you so much

[stiff egret]

https://blog.tryhackme.com/guide-to-king-of-the-hill/

[fair adder]

gosh this has to be easy

[hazy zodiac]

ikr

[fair adder]

got it

i need to get the password for this?

(to the ssh access)

@stiff egret

[stiff egret]

You can login using ssh via multiple ways

if you have the ssh key, you can use something like:
ssh -i sshkey username@IP

make sure you change key's permissions beforehand,
chmod 600 sshkey

If you are new to this, I'd suggest do give some easy/medium rooms a try once.

[fair adder]

i did ssh -i id_rsa shrek@1.1.1.1

the ip is an example btw

[stiff egret]

yeah, that's correct

[fair adder]

someone closed my connection

is that a thing?

yes

it was chuin

okay that is so cool

i know he did it to me, but thats really cool

[stiff egret]

Yeah, this is a defense/attack game, people get in first, they patch, if someone has a shell, they kill the process ID.

[fair adder]

i wanna watch pro vs pro in this

like chuin vs someone else, how cool would that be

[stiff egret]

Watch videos of John Hammond on KoTH.

He made some awesome content on YT

streamed a lot 5-6 months back if I am correct

[fair adder]

bet thank you.

frick i cant get ssh

same bruh

he's good at this

imma exploit it

[hazy zodiac]

i hope my patch work

[fair adder]

your good at this

u son of a

can you go against @fair adder ? chuin

imma exploit it u son of a

chuin

[hazy zodiac]

damn

that command actually worked

[fair adder]

IM STUPIDEST PERSON EVER

[hazy zodiac]

wait

did u got shell?

[fair adder]

almost

[hazy zodiac]

i only patched 2 stuff

[fair adder]

i cant

bcs of u

[stiff egret]

Watch it

[fair adder]

i cant upload reverse shell

[stiff egret]

Keep it PG13.

[fair adder]

oh sorry

[hazy zodiac]

wot

did u nmap scan it sir

[fair adder]

yes

[hazy zodiac]

then why u havent got shell yet lol

[fair adder]

gosh i forgot about nmap scan i did

im trying

[hazy zodiac]

ok imma go sleep

[fair adder]

im giving up

[fair adder]

wat

[fair adder]

can you go against @hazy zodiac in koth i wanna watch and see wh owins

ok

send location

smesh

me smesh chuinzer

LMAO

https://tryhackme.com/games/koth/join/cb6bed6e9c4740c476871fad

[stiff egret]

Private/Public?

[fair adder]

public

but i wont play

i forgot i was updating

[harsh obsidian]

Has anyone, in the history of Panda, managed to find all eight flags. I've got seven but for the love of life, the universe, and everything I can't find the eight daggone flag....

I'm starting to doubt it exists....

[nova tide]

I got 7 as well but haven't tried to look for 8th.

[fair adder]

who stole the 8th flag

[harsh obsidian]

Oh, I've been looking for that eighth. It feels like looking for the lost city of Atlantis

[candid geode]

It is probably hidden deep inside the /dev/urandom file.

[harsh obsidian]

lmfao

[fair adder]

helo

🐣 come play

https://tryhackme.com/games/koth/join/a8bf2cb8ac984b9b69ca1043 12 min

[harsh obsidian]

This is getting to be a good one!

[fair adder]

i am only using 0,24 percent of my power

well played