koth

[latent osprey]

The loop I m using is one liner

[static aspen]

ahh smort

[latent osprey]

How did you hacked the machine??

I saw attack.sh

[static aspen]

the attack.sh was a script to gain a root shell

and all i did was manipulate the ports to find creds

[latent osprey]

Which vulnerability did you used??

Demm pwfeedback

[static aspen]

nvm not that one whoops wrong one

[latent osprey]

Woah! I don't know about this

Cool thanks

[static aspen]

lmfao you removed sudo noice

[latent osprey]

Hi

You know

The exploit you used from saleem rashid

[static aspen]

yeah

[latent osprey]

It is a not a local exploit

[static aspen]

yeah i realised that

[latent osprey]

You can use it directly to go to root

Yeah! I was confused for a bit

I thought you shared another exploit

[static aspen]

i was stupid lol

[latent osprey]

Umm! Naah

I just learned about chattr from you lol

[static aspen]

😆

it took me a while to even remember the chattr syntax

[latent osprey]

Lol! I just deleted chattr

[static aspen]

yeah i saw you deleted chattr and sudo, smort moves

[latent osprey]

And then downloaded it again to unset king.txt

[static aspen]

[latent osprey]

Then again deleted chattr

I was like wtf am I doing

Bro but it was amazing thanks

[static aspen]

np ❤️

do you see the messages when i use wall?

[latent osprey]

Yess

[static aspen]

hahaha

[latent osprey]

I was thinking that what is this ! I saw that for the first time lol

I was killing your shells

Umm! Were they getting killed on your side??

[static aspen]

nah

i have a stable one now

[latent osprey]

[static aspen]

with ssh

[latent osprey]

Demm

[static aspen]

i found pasta's creds

[latent osprey]

I was wasting my time lol

[latent osprey]

Woah! Where??

Ooo I haven't saw that

But that's great 🔥🔥

[static aspen]

the "pneumonoultramicroscopicsilicovolcanoconiosis" or the binwalk stuff

[latent osprey]

Okay the loop!

[latent osprey]

[static aspen]

lemme guess it was just something simple like echo "playgue" >> /root/king.txt | <some command>

[latent osprey]

Yeah something like this

While true; do echo playgue > king.txt ; sleep 1;done

Credits as usual @Lammm#7495

[static aspen]

is that it

[latent osprey]

Yeah

[static aspen]

wow, in a .sh file or command line?

[errant marten]

while true; do echo username > king.txt; sleep .1; done

you need "do"

[latent osprey]

Yeahhh

[latent osprey]

Nope just type this

It will run in bg

[static aspen]

ahh smort big brain

[errant marten]

to run a while loop in bg just add &

exp

[latent osprey]

Yup! Otherwise this will not let you do anything on that terminal

[errant marten]

while true; do echo "1trick" > king.txt; sleep .1; done &

[dull jacinth]

whos xxx

two words i can say to him

[latent osprey]

Lol

I will reach master today

[gentle hatch]

you can also use the watch command, watch -n 0.1 echo "king" > king.txt

[dull jacinth]

/usr/bin/chattr +i king.txt

[gentle hatch]

takes up your terminal but if you're doing a loop race not really much else to do

[errant marten]

loops are for noobs

[latent osprey]

But what if I remove chattr?

[latent osprey]

So what to do ?

[errant marten]

You can just import chattr

its a binary

[dull jacinth]

there are people who remove the whole damn system

[latent osprey]

Aah!

[latent osprey]

[latent osprey]

So what to do???

[dull jacinth]

basically this guy

he needs to be banned

from tryhackme

[latent osprey]

Why?

[static aspen]

who?

[dull jacinth]

Well first of all he isnt playing koth by the rules

[latent osprey]

Yeah I saw he just won a match

[gentle hatch]

message support with the game ID and proof

[dull jacinth]

yes ill screen shot

[latent osprey]

What did he do?

[static aspen]

ahh im guessing he did something like the dreaded rm -rf command

[dull jacinth]

for now lets just not mention stuff about this

we might alarm the guy

[latent osprey]

[dull jacinth]

yes

[latent osprey]

[static aspen]

ooooooff

the only things i think you can delete/fix are suid's sudo perms and chattr

and small vulns

[dull jacinth]

all i know is you patch the vulns and dont remove anything

[gentle hatch]

can't delete binaries afaik

[dull jacinth]

not sure but as long as it doesnt break the game

[static aspen]

i thought you could delete chattr

[gentle hatch]

big reason I stopped playing is one or two idiots always ruining every game

[errant marten]

You can del chattr

[dull jacinth]

yes

[gentle hatch]

if someone brings it in you can delete it

[errant marten]

look at the rules!

it even says you can

only chattr

[static aspen]

btw gg

[dull jacinth]

nice

im quite familiar with esox

i think ive played with him before

[latent osprey]

Yayy thanks

[sour vector]

Gave +1 Rep to @static aspen

[static aspen]

👍

[dull jacinth]

that cat profile tho

[latent osprey]

[stiff egret]

Please keep it PG13.

@dull jacinth

[fair adder]

@stiff egret check dm again pliz? :))

if u free

[stiff egret]

I just woke up, will get on the system in about 2 hours.

[unreal jasper]

yo, koth anyone?

[fair adder]

k

[latent osprey]

https://tryhackme.com/games/koth/join/010d9d60dc8122bfd8254ca7

Hi join 20MIN remaining

@unreal jasper

[strange escarp]

https://tryhackme.com/games/koth/join/8ac08496a1da89ac395473b5

join it starts in 15 min

easy machines only

[latent osprey]

Not working

[strange escarp]

its over

[latent osprey]

Lol how

[strange escarp]

insufficient

[latent osprey]

Ook

[strange escarp]

players

if u wanna play i will create another one

will uplay

[latent osprey]

Yup

Which Macchine?

[strange escarp]

ok gonna create an random easy

is it ok with u

u there

[latent osprey]

Yes

I m herr

[strange escarp]

https://tryhackme.com/games/koth/join/3b803eb6df04f1768814146b

starts in 5 min

rq

[latent osprey]

Join koth vc

[strange escarp]

a min

[dull jacinth]

Wait what did I send

I forgot

[strange escarp]

nice game dude

[stiff egret]

I've deleted the msg.

[sour zealot]

https://tryhackme.com/games/koth/join/8dba1b6c2688e08b80bdca19 (20min)

[latent osprey]

[sour zealot]

https://tryhackme.com/games/koth/join/fa2d8c2ed6ced2caf0781ccf (24min)

[unreal jasper]

https://tryhackme.com/games/koth/join/827be1adfab9d540ebf2d77a

[latent osprey]

Koth anyone

[novel galleon]

hi

[fair adder]

@latent osprey send link

[novel galleon]

okay

this is already intimedating

is it like singleplayer?

[fair adder]

yes it is singleplayer

[novel galleon]

you got to defend it yourself?

damn

oaky

[fair adder]

correct 😄

[novel galleon]

i dont know blue team shit

but sure lets go

[fair adder]

not like that

you attack and then defend

@latent osprey ill make actually

[latent osprey]

Are you making

Or should I make??

@fair adder

[novel galleon]

how good do you have to be

[latent osprey]

Ook making

[fair adder]

i was making

[novel galleon]

good luck guys

[fair adder]

https://tryhackme.com/games/koth/join/b4fa15d630b998ec6bd8f510 @latent osprey @novel galleon

[novel galleon]

[fair adder]

good luck

[latent osprey]

Ook joining

[novel galleon]

what

[fair adder]

oh gotta change your dificulty

[novel galleon]

oh

where

settings?

[fair adder]

go to setttings

yes

then join again when your done

[novel galleon]

okay how do i join now

[latent osprey]

Join

[fair adder]

https://tryhackme.com/games/koth/join/b4fa15d630b998ec6bd8f510

[novel galleon]

okayy

joined

now what

[fair adder]

we wait for game to start :)

[novel galleon]

okay

[strange escarp]

😉

[novel galleon]

what should i know

[latent osprey]

@strange escarp join

[strange escarp]

done

[fair adder]

eyyyyyy

[latent osprey]

Woah

Gonna be a gg

[novel galleon]

what should we try to do

[novel galleon]

yes

[fair adder]

try to get in the machine before anyone else

and make sure they dont get in

[novel galleon]

VC?

[fair adder]

i mean i wont talk but sure

you can screenshare

[strange escarp]

i only know how to hack but idk how to stop imao

[novel galleon]

i dont know anything lmfao

[fair adder]

google very easy

[strange escarp]

yeha

[fair adder]

"how to kick people out of my ssh session"

[novel galleon]

so

[strange escarp]

haha

[novel galleon]

will the box start off with any vulns?

[fair adder]

of course

[strange escarp]

they have 3 to 4 or more

vulns

[novel galleon]

and then

you have to log in

[fair adder]

yes

[novel galleon]

and patch those vulns

right?

[fair adder]

but get flags

[novel galleon]

and flags will be anyhwere

correct?

[fair adder]

yes you can look around

could be in ..

[strange escarp]

whats the machine lvl

@latent osprey

[fair adder]

i think we gotta wait

[strange escarp]

curosity

im gonna wear my hoodie

[fair adder]

[latent osprey]

Idk

[strange escarp]

oh ig ur the authon of the game

[fair adder]

nah i am but we cant see yet

when game starts then we can

[strange escarp]

ok

[fair adder]

please dont be a windows machine

[strange escarp]

haha

yea

[novel galleon]

okay

idk what im doing

but im doing sometihng

[strange escarp]

haha

[novel galleon]

OMGGGG OH GOD

IDK WTF IS GOING ON

WHAT DID YOU GUYS PULL ME INTO LMFAO

[fair adder]

i know what i need to do

[novel galleon]

good for you,hacker

[fair adder]

gonna do it on my kali vm though

[novel galleon]

😭

[fair adder]

what are you on?

[novel galleon]

sshed kali vm

[fair adder]

you got ssh?

[novel galleon]

what?

on my kali?

[strange escarp]

#koth-voice-chat

willl be a good place

for disss

[novel galleon]

yeah

[fair adder]

god damn

ok im gonna get something now i think

[latent osprey]

[ashen parrot]

Any Beginner who is interested in playing koth for practice with me

[unkempt moss]

me

[nova tide]

me

[unkempt moss]

if any beginner wanna do koth for practicing DM me or ping me

[strange escarp]

@latent osprey

ping me back when ur in

[latent osprey]

Hi

[strange escarp]

hlo gonna have my lunch

2:30 or 2 oclock

fine with u

,?

[ashen parrot]

Any Beginner who is interested in playing koth for practice with me

[unkempt moss]

hey I just woke up

let do it, after I done eating

[spark rock]

Pretty new to all this stuff, what's the best way to get to know the basics of KOTH. From a complete beginner standpoint.

[gentle hatch]

just start playing and you'll learn, there's a group that regularly plays in voice chat you can always hop into and will give you some tips

[spark rock]

Got it, thanks 👍

[unkempt moss]

why koth not currently work?

[stiff egret]

Be a little more specific?

[unkempt moss]

It said "EXPIRED" when the machine starting, atlteast for the private match

[unkempt moss]

It seem to work fine is public match, except that when the match started there no IP and machine not show

[stiff egret]

It is repetitive or happened for just one match?

[unkempt moss]

it repetitive

it been like this for almost 2 hours now

[stiff egret]

cc: @lusty portal
This same issue keeps popping up everytime there are some issues with site. I am guessing this has something to do with earlier problems today?

[wide gate]

why always the same people play koth?

i don't know what mean cheating and how far we can go with the machine!

[nova tide]

That where the rules come in. You need to read the rules before you play the game.
You can find them here in FAQ section: https://tryhackme.com/games/koth

[wide gate]

i read all the rules but i was two time have root priv but then the connection is lost and other time i can't change the king.txt file even with root priv !! and there is no rooms talk about that kind of priv!

[nova tide]

1. someone killed your shell.
2. Read about chattr binary.

!docs koth

[pearl glade]

TryHackMe

How to play TryHackMe's King of the Hill (KoTH)

https://help.tryhackme.com/using-tryhackme/king-of-the-hill

From TryHackMe with ❤!

[nova tide]

it would be super helpful for you as well. There's also a blog post linked you can read that too.

[wide gate]

thank u can u suggest any books for patch vulns ?

[sour vector]

Gave +1 Rep to @nova tide

[nova tide]

i haven't read any but if you are looking for blue teaming books then you can ask for suggestions in #bookclub

[wide gate]

i read blue team books but no thing similar to koth

and why always the same people

around 4 or 5 persons always winning

When I see their accounts, I lose hope in the game

[nova tide]

There are multiple vulnerable services running that you can explore. Try patching the one you got in through and after that explore the box a bit and see if you can find anything.

[wide gate]

okay

thank u by the way for your time

[latent osprey]

@lilac basin

Send me the link

Ookk np

[opal dove]

generally speaking, they just have writeups for the machines, and a simple chattr script

the current meta for the game is to learn the machine, then quickly get your scripts on the machine before anyone else

I'd focus against trying to win initially, although it seems counter intuitive

if you want to learn patching, don't run offensive scripts, just try learn what the web applications etc. are doing

and how you can patch that

if you run offensive scripts it can piss people off and they start killing shells :(

[wide gate]

okay

i found that koth isn't good for learning . it's just let u type quick and race the time. but the same web app and the same vuln no thing new .

[quiet schooner]

Try hogwarts then

[ashen parrot]

Any beginner who wants to play koth with us for practice

[strange escarp]

Hey @ashen parrot

U here

Ping me back when u want to play

[ashen parrot]

Please tell me how to kill other people's terminal in koth

[strange escarp]

google : how to kill someone ssh or reverse shell

[stiff egret]

You find the PID of the shell/bash/ using ps and kill it using kill -9 PID

If you google about it, you can find way faster and way better ways to do this.

[ashen parrot]

Any tips and tricks to defend in koth

[lilac basin]

dont kill shells, dont run while loops.

[quiet schooner]

Killing shells isn't a great defense. Patching vulns will do much better.

[dapper escarp]

Persistence -> Patch -> Purge

• Set up your persistence so you can get back in with ease.
• Patch the systems vulns so you can prevent others getting in.
• Purge those who may have gotten in

[quiet schooner]

I'd also break down patch a little further: If people can get in but can't get root then that's a little less serious than if they can get root and kick you out

[lilac basin]

patch comes before persistence

[quiet schooner]

Eh, not much point patching if someone then locks you out, means you can't get back in

[lilac basin]

but if you path before someone else get root you will remain the only one that obtain root priv

instead if you dont patch and someone becomes root he can kick you off and remove your persistence

also he can kick you off before you get persistence

[ashen parrot]

what if someone is already root and we have to kill them

[quiet schooner]

I'm not saying don't do it

[ashen parrot]

but how to do it

[quiet schooner]

You've been told what to research

[ashen parrot]

kill -9 PID

?

[fair adder]

Yes

[ashen parrot]

but when i do ps -a

i find only two-three process

[fair adder]

Am sorry but I'll help you after this

That's how I learned and is the best way

[lilac basin]

do ps -aef

[ashen parrot]

ps -aux

[lilac basin]

use this that looks better

[strange escarp]

hey

can we make infinite no of broadcast msg using any script

[lilac basin]

"no of broascast" is the message?

[strange escarp]

like this

i cant stop that

[strange escarp]

no my bad
can we make infi no of broadcast msges

[lilac basin]

oh this is done with wall

[strange escarp]

haaha there is no remedy right then

[lilac basin]

yeah cuz i think it is a while loop

[fair adder]

I think there is...Muiri said in general that this could be escaped..I don't know how coz wasn't able to understand that properly what solution he said

[strange escarp]

i think my team mates are making use of koth writeups and getting root in less that 10 min

and making this nonsence

[strange escarp]

oh cool

[lilac basin]

Not for sure

[ashen parrot]

someone is doing infinite infinite loops in koth

how to stop it

plz tell me now

[strange escarp]

ur friends are doig it bro

i have noting to do with that

[stiff egret]

mesg n

This will stop wall msgs on your Pty.

@strange escarp

[strange escarp]

Oh thanks

Noted

[strange escarp]

Thanks 😊 gonna use this next time

[sour vector]

Gave +1 Rep to @lapis linden

[strange escarp]

+rep @stiff egret

What

Not working

Cool down ig

[stiff egret]

dumb bot I tell you, dumb bot.

[strange escarp]

[opal dove]

+rep @stiff egret

[sour vector]

Gave +1 Rep to @stiff egret

[opal dove]

there we go

I got your back

[stiff egret]

lol thanks

that doesn't change the fact that you dumb @sour vector

[nova tide]

There's a cool down to give rep.

[sour zealot]

https://tryhackme.com/games/koth/join/4f7df9364f3802c4cb7a357f (22min)

[lilac basin]

https://tryhackme.com/games/koth/join/840a317c3de2662a374f9e5e

[fair adder]

koth game tonight at 5PM pst time be there or be square

[modest rock]

like madden square? xD that's 2 am EST but i'll be there xd

[fair adder]

Heyo let's make that at 6 I'm still downtown :p!!

[modest rock]

sure, i was about to refuel on energy so no worries :p

[fair adder]

I'm trying to hurry my guy!!! 😄🤗

[modest rock]

take your time! i've got all the time in the world 😉

that gives me time to organise a koth folder together

[fair adder]

@modest rock https://tryhackme.com/games/koth/join/0340f028557c217f360939d5

spectators link: https://tryhackme.com/games/koth/24872

here we go

[fair adder]

My gobuster and nikto aren't working

Actually nikto started to return some results but gobuster i keep getting errors

[stiff egret]

Which machine is it?

[fair adder]

koth

h1: easy

[stiff egret]

🤔 I don't think directory brute force will work on that one.

[fair adder]

i know where one flag is but i can't get to it

[modest rock]

i'm half asleep haahah, 6am grinding koth xD

[fair adder]

LMAOOO dude this is super fun!!!!

nmap is taking for ever !

[modest rock]

ooh yh i feel ya xd

[fair adder]

I found the php admin login

I know thers a flag in here !!!

I'm going to run burp

Now burpsuite if frozen smh

[modest rock]

ugh i can't even ls properly smh

[fair adder]

Dude i'm bashing my head

burpsuite completely broke my machine

it's subzero frozen

[stiff egret]

just burpsuite being burpsuite

[fair adder]

*dude i found the upload page but fucking burpsuite is just freezing on me

i can't see the uploads button to upload my .php shell!!

all i see is the browser button fml

[stiff egret]

you don't need burpsuite to get a shell from that foothold

[fair adder]

Ah shit you are right!!!!

webshell????

here we go

[modest rock]

my netcat is broken it won't connect with the webshell lol

[stiff egret]

You sure you are calling it back right?

try curl localhost:<PORT IN REVSHELL> on your machine with nc open, to see if the netcat is dead or you are doing something wrong

if netcat catches the connection, then you are calling the php/jpg file wrong on the webpage.

[fair adder]

restarting my entire machine FML

[fair adder]

Any other suggestions????

I can't seem to upload a php file without having to use burp

[stiff egret]

||extensions matter|| that's all I can say

[fair adder]

Dudes i'm so freaking close !! smh

i can't get this stupid webshell to work 😫

i upload the .php rev shell and i navigate to /uploads/webshell.php?cmd=whoami

and nothing 😦

[fair adder]

GG

I was just about to use pentestmonkey and start up nc

I couldn't get webshell.php to work 😦

[modest rock]

same XD

[fair adder]

did you try to upload a shell through here also lol ?

[modest rock]

jup i uploaded an embedded jpg

[fair adder]

so it was .jpg extension?????!?

I kept using .php extension are you kidding me.

How many directories did you find ?

[modest rock]

aaah that's unfortunate

not a whole lot

i stopped gobusting midway when i saw the ticket page

[fair adder]

Man that was a good game

did you manage to rev shell?

[modest rock]

i tried curling but it got a connection but then dropped if i hit enter

[fair adder]

Do you know of any good koth videos on youtube that walkthrough the linux machine ?

[stiff egret]

John Hammond's YT is the way.

[fair adder]

That's the ones i'm watching right now lol

[stiff egret]

Honest advise, do watch his Bsides Nova KoTH video, it's 3 hours long or something I think. Not sure, but I watched it on 0.25x to see what they were doing and it's awesome

[fair adder]

I saw that one! I'm watching that one next 🙂

[stiff egret]

Totally worth it

[fair adder]

I love this !!!

anyone wanna do koth

[fair adder]

Duuude i just got my ass handed to or else id play with ya 🙂

[fair adder]

i'm probably worse than you

[fair adder]

I need a new laptop

[stiff egret]

I can play one too if you send the invite link

[fair adder]

Can you guys send spectators link!!

hmm

XD

[stiff egret]

why?

[fair adder]

Mine is super slow!!

after metasploit is done installing on wsl, i'll send invite link @stiff egret

Burpsuite froze my machine

[stiff egret]

What are your specs? @fair adder

[fair adder]

we're gettiing there

You guys started already?

nope just installing my metasploit

[fair adder]

metasploit was my next option

when I found the service it was running

[stiff egret]

that's a good enough system I think

[fair adder]

Super glitchy

Burpsuite froze and i had to restart my entire machine

nothing was clicking or running

[stiff egret]

🤔 I've used i5 2nd gen with 8 gigs for 1 year, it was smooth af and I usually had a kali VM , discord, Firefox, notion open at almost all the time

[fair adder]

I had Burpsuite, NMAP, gobuster, nikto running and boom it just froze/crashed

[stiff egret]

You on SSD?

[fair adder]

Is there a way to keep your machine clean and fast?

[fair adder]

Yes

[stiff egret]

then I'd say use linux in dual boot or as main OS

[fair adder]

On my main primary drive????

instead of windows?

[stiff egret]

I had arch as main OS and kali in VM. Did everything in vm,

[fair adder]

i wanna do that but i get errors on my computer downstair's i fully switched to ubutnu and it doesn't find my internet

[stiff egret]

Use this to make sure your main OS doesn't die bc of your VM

Execution cap

that way your main os will have 20% of the CPU even if all processors go 100% in VM

[fair adder]

That's insane i'm not that elite yet lol

[stiff egret]

🤷‍♂️ you can use regular Ubuntu as well

[fair adder]

in the one koth game john hammond did he had nothing installed

[stiff egret]

lol yeah, I remember

[fair adder]

I love my windows

i rememeber

yeah 🤣

[stiff egret]

this love is gonna get you killed

[fair adder]

Lol

[stiff egret]

https://tenor.com/bfJOc.gif

[fair adder]

By far it's been a smooth ride so far except for today

don't know what happened

[fair adder]

The only one i found is 44 mins long

[stiff egret]

yeah that's the one, at 0.25x feels like 3 hrs 😆

[fair adder]

LMAO

[stiff egret]

sudo?

[fair adder]

Okay watching this now 🙂

[fair adder]

windows

[stiff egret]

wsl

[fair adder]

they say nmap is broken on wsl

[stiff egret]

I thought it were installing stuff in wsl

[stiff egret]

^

[fair adder]

oh i am

it's just they say wsl and nmap don't go hand and hand

[stiff egret]

huh, no idea, never tried WSL

[fair adder]

it's a cool thing :D

yeah lemme show you what happens on my wsl

[stiff egret]

Will give it a try someday.
You can't skip windows in corporate field.
It's a nightmare that's gonna come weather you like it or not

[fair adder]

Yo what notepad is he using on the left side of the screen do you know?

[stiff egret]

sublime

[fair adder]

no way !

ugh

[stiff egret]

lol why?

[fair adder]

so nano < sublime 😦

can i create .php with sublime?

[stiff egret]

anything > nano

[fair adder]

Noooooooo

my mind has been changed 😦

[stiff egret]

Um, You do know that sublime is a text editor? You use text editor to edit files? last I checked php comes under the criteria

[fair adder]

stupid question. sorry

[stiff egret]

well, it got the job done so

[fair adder]

🤣

wonder what happpens when i use multiple flags 😳

[stiff egret]

try 2>/dev/null?

that should pipe away the errors

[fair adder]

tried that

and same thing but

noticed this at the top

i scrolled all the way back up

[stiff egret]

eh just use a VM

[fair adder]

fax

[fair adder]

Broooooooo

look at all this shit john was running

what the flying hacker life is all this

lol

[stiff egret]

I watched this video so many times, I almost memorised it

[fair adder]

OMG

You are a true hacker

[stiff egret]

no that's John

lol

[fair adder]

you have to multi task to work at mc donalds shit is hard

look at all those screens

[stiff egret]

yeah I get it

[fair adder]

It's like flying a plane

[stiff egret]

hence 0.25x

[fair adder]

he can almost be a damn pilot lol

[stiff egret]

[fair adder]

This is amazing

thank you @stiff egret

[stiff egret]

the bot sux anyway nvm 😄

[fair adder]

+rep @stiff egret

[sour vector]

Gave +1 Rep to @stiff egret

[fair adder]

Hopefully i don't get in trouble

But it was a really cool video you suggested so thank you for that

[stiff egret]

v4 sublime looks great by default

[stiff egret]

naah, that's Ok I think

[fair adder]

Hold up, you are koth lead and koth staff???

And author/blogger XD

[stiff egret]

KoTH-lead is the lead of KoTH staff

[fair adder]

Lol you are amazing !

[stiff egret]

ayyyy

[fair adder]

Hey man you suggested such a great video actually... I now truly see what it means to "fly" using linux and your hacking skills. This is such a great vid

I also understand now why hackers like to have multiple screens

[stiff egret]

naah that's just a scam, all we do is hack on one and have spotify/discord on another

[stiff egret]

IKR! this video helped me A LOT

[fair adder]

Is it really ?? i thought it was so that you can have multiple terminals and process running?

[iron cloud]

Hey would anyone like to play KOTH? Cause I am really bored right now

I am on a public room...

https://tryhackme.com/games/koth/join/a204272df174a5c215dd0326

[fair adder]

i kinda wanna play now :p

[stiff egret]

it was a joke (my comment on multiple screens)

[iron cloud]

care to join? @fair adder

[stiff egret]

I've joined in, although I re-installed my VM so I might end up losing bad. but eh

[fair adder]

yes but only if we do h1: easy

make it public so others can join

[stiff egret]

It's a public game, that's random box selection

[iron cloud]

Its a public server

I cant choose box

[fair adder]

you also have the option to create private

[iron cloud]

should I?

[fair adder]

No

[iron cloud]

K making

[fair adder]

make it public

[iron cloud]

ya we can play public

[fair adder]

i think there were others who wanted to play

boy i need to get my notes straight

[iron cloud]

VC?

??

[fair adder]

nah don't feel like talking rn

just hacking 🙂

[iron cloud]

fine........ 😄

I just played one yesterday and GOSH I WAS supposed to be king, but the last moment, someone changed the permissions for king.txt 😫

[fair adder]

Interesting

can't you chmod +x again?

[iron cloud]

u left the game?

[fair adder]

no?

[iron cloud]

I was root.... tried everything

[fair adder]

i never was in ?

[fair adder]

did he block the chmod feeature on you

[iron cloud]

y werent? 😞

[iron cloud]

as I said, it was last moment

I also guess he used chattr

[stiff egret]

immortal

[iron cloud]

oh thats too much 🤣

[fair adder]

LMAO

that is elon musks laptop

[stiff egret]

my VM thinks I have a nuclear core attached to it 😆

[fair adder]

it would be crazy if tesla came out with their own laptop and cpu

[iron cloud]

I am on dual boot machine, so I don have to worry about ram or other resources....... I left VM months ago

[fair adder]

it would probably be a chargeless laptop

[iron cloud]

VC? Mr holmes? @stiff egret

[stiff egret]

I can't turn the mic on. Can listen and reply in chat tho

[iron cloud]

8 GIG 😵

[fair adder]

Daaamn son

sickkkkkk

[stiff egret]

that's probably the lowest around here

[delicate cedar]

Cry in Celeron 6gb memory

[fair adder]

What is this yay -sY gobuster and yay -sY nmap command john is using here everytime he tries to run those tools and gets an error ?

[stiff egret]

yay is package manager/installer for arch.

equivalent of apt

[fair adder]

so he's using arch in this video????

[stiff egret]

yep

[fair adder]

what!!!!!

[stiff egret]

fresh arch install

[fair adder]

he said he didn't use arch!??

wow

lol

[stiff egret]

[john@arch]

[fair adder]

I thought he used Ubuntu?

oh dang

[stiff egret]

uh, it varies

[fair adder]

he must of switched a long time ago

[stiff egret]

the video is of a long time ago

[fair adder]

yup

[fair adder]

it's how anything is installed on arch

[iron cloud]

I had a late start guys 😩

had an urgent call

seems like @stiff egret king

[stiff egret]

dw nothing is patched

[wind furnace]

Not quite correct. Arch's package manager is pacman yay is used for the AUR (arch user repository)

[fair adder]

true and you can install apt on arch too

so ya i'm wrong on that one

[wind furnace]

I wouldn't say completely wrong. Since you can install software with it

[fair adder]

you guys are pretty cool

[fair adder]

Hold up!!! you guys were playing koth???

[fair adder]

Dw he won't patch until and unless it's required...

[stiff egret]

https://tryhackme.com/games/koth/24874

[fair adder]

LOL still playing

I see Mr.Holmes is king of course lmao

[fair adder]

can i ask you a couple questions after this game?

[stiff egret]

sure np

[iron cloud]

hey holmes wt the hell did u do? the machines too slow man @stiff egret

[fair adder]

LOL

He's at 310 points smh

[stiff egret]

it's like that from the beginning

[iron cloud]

can we reset it plzzz?????? Looks like nik isnt alive

[stiff egret]

Uh sure

one sec

[iron cloud]

fasttttt man only 20 min remaining

[stiff egret]

it's working fine

[iron cloud]

u know wt? never mind

[fair adder]

370 points 🤣

[stiff egret]

I just got the rev shell back, the machine is OK

[fair adder]

@stiff egret after you get in and get root do you still give other people a chnace to try and at leas get something?

[stiff egret]

I haven't patched anything at ALL

the machine is in the same condition, I only added my persistence

[fair adder]

that's just what i need

wanna play another one

[stiff egret]

Sure

[fair adder]

yay

just ping me when

[stiff egret]

https://tryhackme.com/games/koth/join/33f63ea8a265b00be3ac4045

Starting in 24 mins

[iron cloud]

noooooo u changed password for ssh

[stiff egret]

Uh no I did not

[iron cloud]

and whats with the php? it just doesnt execute

first of all the machines all funky

can uuuuuu plzzzzz resettttttt

[stiff egret]

done

[iron cloud]

ladies and gentleman, we have a new king

Should have done this at first LOLLLL

lord I hate the machine..... its tooo funky

[fair adder]

@stiff egret is this agaisnt the rules?

[stiff egret]

No

[iron cloud]

NOO..... LOL.... thats the thing of the game

u have to find other vulnsss

[fair adder]

why have i never thought of that 🤣

[stiff egret]

https://cdn.discordapp.com/attachments/695343809726513292/797170397215719465/unknown.png

[fair adder]

i coulda kept king all i had to do is change ssh password

[stiff egret]

You can change passwords, you can patch the machine

[fair adder]

it was the only room i ever got far on

[iron cloud]

😭

times over

[stiff egret]

yeah

GG

[iron cloud]

I had a late start 😫

[fair adder]

wanna join this one @iron cloud

[iron cloud]

hey holmes it was nice playing

[iron cloud]

ya coming

[fair adder]

https://tryhackme.com/games/koth/join/33f63ea8a265b00be3ac4045

[iron cloud]

u wanna talk about it holmes?

how did ya gain access? Wordpress?

[stiff egret]

the password

[iron cloud]

for shifu

[stiff egret]

yeah

[iron cloud]

knew it

[stiff egret]

static machine, easiest way in

[iron cloud]

d u know wts with wordpress? I changed 404.php but I didnt get a callback

[stiff egret]

that should work

🤔

[iron cloud]

ya I was wondering that

[stiff egret]

you replaced the 404 with pentestmonkey rev shell?

[iron cloud]

ya I did copy paste, changed ip and port

and the machine was tooo funky

even tred curl to trigger

[stiff egret]

Wordpress does that to machines

[stiff egret]

it wasn't that bad, I was getting callbacks normally

[iron cloud]

yaaa........ I had expertience with mr robot ctf

[fair adder]

Freaking dope

[iron cloud]

also u know wts with tomcat

[fair adder]

CONGRATZ ya'll

[stiff egret]

yep, public exploit

[iron cloud]

can ya please sent url? if u don mind?

[stiff egret]

I cannot spoil machines here, I can DM you if you want

[iron cloud]

care to join? @fair adder ?

[iron cloud]

great

[fair adder]

So by changing ssh password once you find the king.txt or root.txt flag you can stay king ??

[iron cloud]

unless someone changes king.txt

[fair adder]

Can't right now I'm watching a couple videos 😊

[iron cloud]

hey @stiff egret , honestly, u changed chattr permissions right? 😏

[stiff egret]

Yeah, obv, that's how you stay king

[iron cloud]

knewwwww ittttttt

[fair adder]

hmm lion

never done this

[fair adder]

ahh might need new vpn file

[iron cloud]

i am innnnnnn

[fair adder]

um i think i left

nvm all good

ok one of you patched ftp

[stiff egret]

not me

Time to start patching

get your persistence people, Patching starting in 3..2..1

[iron cloud]

someone used chattrrrrr

[stiff egret]

the question is where are you hiding that pspy @delicate cedar

[iron cloud]

whoooooo kicked my shelllllllllllllllllllllllll

lorddd

[fair adder]

am still not in anything

[stiff egret]

I am not sure if you can get in now

[fair adder]

lmao 🤣

[stiff egret]

although you can still find the vuln

if you see the vuln and the exploit doesn't work

that's probably me being a mean person here

[fair adder]

i couldn't get into ftp in the beginning was it even possible

[stiff egret]

I honestly dont remember

[delicate cedar]

no pspy 🙂

[iron cloud]

HEy wtff man...... the moment I echo to /root/king.txt, my shelll kicks offf

[fair adder]

🤣

[stiff egret]

No idea what happened here, but someone messed up

[iron cloud]

did someone messed with tmux tooo

tis getting interestingggg

[stiff egret]

whoever planted that ssh backdoor, hats off. That was NEW

[delicate cedar]

What happened to ssh server?

[stiff egret]

Died bc of that preload rshell

that's my guess

I did kill some of it's processes, but that shouldn't take down the server

[delicate cedar]

Seems like no one trying to fix ssh server

[delicate cedar]

Just coming back up -_-

[stiff egret]

daemon and main both are on

You've won @delicate cedar resetting the machine now at 20 sec gap to extend it

[delicate cedar]

😂

[stiff egret]

oh nvm gg

[iron cloud]

who the helll reset at last

😵

[stiff egret]

It was fun lol

[iron cloud]

ya it wasssss

would be real fun if we were is VC

[stiff egret]

I forgot that machine content will be lost 😂 I wanted to explore it a bit more

I don't know what were you doing with that preload in ssh

[iron cloud]

I was just inside mysql db 😩

[stiff egret]

But that's something I haven't seen before

[delicate cedar]

My backdoor is only ssh 😢

[iron cloud]

nd that is?

[delicate cedar]

I'm basically doomed when that messed up

[stiff egret]

Yeah, I saw that, was trying to locate it

But the game ended

[stiff egret]

Ssh backdoor with preload somehow

[iron cloud]

gosh I have like 100s of tabs on chrome open here 🤣

[stiff egret]

😂

[delicate cedar]

Looks like rshell is messed up, time for write rk show his true power.

Also @stiff egret you didn't stripped ur binary

I can quickly reverse the content

[iron cloud]

Also theres about 20 shells in terminator 🤣 BTW pwncat is too slow for me

hey...... does anyone know y I was kicked off while echo ying to king.txt

[delicate cedar]

Oof, lucky me

[stiff egret]

I'll look for it

[stiff egret]

Which one is the question.

[stiff egret]

Pwncat is too slow for koth.

[stiff egret]

No idea, but most likely you were caught in the crossfire bw me and stellarix

[opal dove]

stellarix got a new backdoor? 👀

[stiff egret]

Yep, most probably, can't say much until I see that binary

It's some sort injection in ssh process

Probably a custom reverse shell sending binary, hooked with ssh

[opal dove]

oo, that sounds very smart

[stiff egret]

Yeah

[opal dove]

Stellarix knows C? 👀

[stiff egret]

a pro

[opal dove]

I'll need to read up on that one

I haven't played against stella for a while

sounds like we need a game

[olive flint]

What is this channel never been here before

[nova tide]

This is only for the l33t haxkors

[olive flint]

Oh... I'll take my leave then 😢

[nova tide]

KoTH > Certs.. give up on those certs and start playing KoTH.

[olive flint]

nooooooooooop

[ashen parrot]

Any beginner interested in playing koth with me for practice

[stiff egret]

We watch hills over here.

[iron cloud]

I got it by today 😑

[lavish rain]

Yeah, sure. I need to practice too

I mean i know what's going on, I also know the tools but I need to practice more

Anyone, wanna play koth?

[deep crag]

Ask people on voice chat they might.

[fair adder]

https://tryhackme.com/games/koth/join/8cfa1b8d0331f815a6a9133c

already 3 of us in here

uh oh naughty joined

already lost

[errant marten]

9 people, its gonna be interesting

[fair adder]

make that 10

[fair adder]

did one of you patch the php reverse shell?

[nova tide]

GG all

[pine dirge]

got crushed 😛

i cracked the ssh passphrase but it wouldnt except it

[errant marten]

https://tryhackme.com/games/koth/join/cae5bf76151e1d3362ed767c

[errant marten]

https://tryhackme.com/games/koth/join/f176eec2c9136955d9851226

[errant marten]

3 min.

[ashen parrot]

Any beginner interested in playing koth with me for practice

[fair adder]

sure

nvm gotta go 2 bed

:(

[stiff egret]

I am deleting this msg, since it contains a spoiler for a fairly recent room, plus sharing spoiler information about koth rooms is not allowed.

@sour zealot

[latent osprey]

@stiff egret hey! The ftp part always crashes in my pc in hackers machine can you tell me something I can do about it??

[stiff egret]

You must be doing something wrong

[latent osprey]

I do this

But still

I don't get any password match

And after sometime my pc crashes

[stiff egret]

I have no idea how that command can crash your PC

that's hydra running on 15 threads.

It's just not possible

[latent osprey]

It runs in my pc but after 10 to 15 it just stops

And nothing happens

Which word list should we use in KOTH??

[stiff egret]

@quiet schooner Got any ideas here? (You created hackers, you obv know more about it)

[latent osprey]

For password cracking

[quiet schooner]

Someone probably changed the password before you could get it

[stiff egret]

Context: They are running hydra on ftp with 15 threads

[quiet schooner]

Hydra should be happy with 64 threads

[stiff egret]

Any tbh, it depends on how you hack

[latent osprey]

Nope! When I try this in private koth

[latent osprey]

But during hacker machine it takes too long to get the password with hackers

[quiet schooner]

It's designed to be a good few minutes

It's also dynamic

[latent osprey]

Ummm! It been 8k passworda but still I haven't got the password for ftp

[stiff egret]

You are either dropping packets or doing something wrong. It shouldn't take this long. And hackers machine is hard, intentionally.

[latent osprey]

that's why ! I also can't find any other way to get in that machine

@quiet schooner is there only one way to get in haxkers mahine?? Ftp only?

[stiff egret]

This has been said time and again, I repeat it,
All machines have multiple footholds and multiple priv esc points.
Usually more than 3 each.

[nova tide]

why not try poking at other services?

[latent osprey]

I just saw you

[latent osprey]

I try but don't get anything! I will now try all these things in private koth

[quiet schooner]

The writeup is out there

[lavish rain]

@ashen parrot I can. DM me

[sour zealot]

Let's say I have the commands 'expand' and 'less' as a setuid. Is there any other way to exploit this instead of reading /etc/shadow and cracking the password?

[stiff egret]

If there's an option to pop a shell using those binaries then you can do that, but usually less can only read and so can you.

[sour zealot]

ok thanks.

[errant marten]

https://tryhackme.com/games/koth/join/c6388b7081ad26be8230ca0a

[lilac basin]

https://tryhackme.com/games/koth/join/d2db33be0fc82398755449a3

[frail ridge]

remember that some machine does not change the password

you could quickly get in, get root and change passwords

[lilac basin]

i dont change passwords

never

[frail ridge]

i do

and i think thats legal rigtth?

[lilac basin]

yeah it is

[frail ridge]

it just not fair for entry person thats my point hehe

beacuse they get lost try to get in 😩

[lilac basin]

yep

so dont change passwords

so everyone can get into

just think about becoming root

[somber marsh]

I think I'm nowhere near a point where I could play Koth, but could anyone give me a quick rundown on where I need to be to give it a try?

[vast siren]

I'd love an answer to this question as well!

[quiet schooner]

So actually hacking into the boxes, most are like an easy-medium level THM challenge room

Defending is a different matter

[somber marsh]

so would you recommend going through the defensive path first?

[quiet schooner]

I wouldn't say it'd help much

[somber marsh]

more independent learning is required perhaps

I'll probably steer clear for now, I'm barely any good at the offensive side as is

[vast siren]

@somber marsh I'm right there with you. Might try one just to see what it's like but I wouldn't have any expectation on my results

[somber marsh]

maybe we can try a private one together at some point, see how it works

[vast siren]

That'd be fun! Maybe we could get a few noobs together and all get into some kind of private chat to discuss or something.

Teamwork sounds more fun than competition at this point

[somber marsh]

sounds like a good time, I'm in

[vast siren]

I'd like to do more work on the beginner path first but let's keep in touch

[somber marsh]

yeah, I'm at the final room of the beginner path, but I kinda breezed through things, so I'd like to review some notes, reset a few rooms

[gentle hatch]

come hang in voice chat whenever you see people in there, lots of koth players friendly to new people hang out there (including me)

[ashen parrot]

Any beginner interested in playing koth with me for practice

[sour zealot]

Maybe It's just me but why does the 'food' machine not show up here?

[stiff egret]

Only most recent 10 machines show up in that table.

The remaining machines are still the part of pool, but the table is for only 10 machines.

[lilac basin]

@swift juncogue "Do NOT delete system binaries (except chattr)"

[supple herald]

Shrek, productions etc isn't showing up as well

[stiff egret]

As I said, they are the older machines, and the table only shows last/most recent 10 machines

Shrek was the first/second machine to be released I think

[nova tide]

@lilac basin can you share the game invite?

[lilac basin]

https://tryhackme.com/games/koth/join/33cab2fac190ad56627cf8e6

[nova tide]

Noice someone removed the binaries

[lilac basin]

yep

[nova tide]

Voted reset. Don't want free king points when there are no binaries

[nova tide]

@lilac basin what's the point of killing my shell 20+ times by now in less than 5 minutes when you can simply patch it?

[lilac basin]

you are running while loops

[nova tide]

Ok now you can try killing shells, no more loops so it won't matter.

[lilac basin]

why do u run scripts

[nova tide]

why won't i?

@lilac basin just @ me when you plan to play again..

[lilac basin]

i will go to bed now tomorrow i will play again

[nova tide]

Just @ me when you play again i will try to join in

[lilac basin]

sure

[fair adder]

Koth game anyone ????

https://tryhackme.com/games/koth/join/52c46dc668be567626e7f0a6

[wind fjord]

first game of koth for me o7

[fair adder]

Let's run it 😈

[somber marsh]

would like to, but I probably won't be able to do anything yet