i gave up long time ago
#koth
brittle ether
Same
steep agate
I think this is you
graceful bear
I think this is you
true
steep agate
if he was a sysadmin he would certainly use an iptables, but it's forbidden in koth π€£
plush kiln
Hehehe
lilac idol
is this a flag or what
graceful bear
i also saw that
decoding it looks like a password
but unfortunately it's not a flag
lilac idol
it was a hash
now what
this is the password
736872656o6973616s6r696s6r
lets try it
steep agate
so i can get a flag bro
these are the only flags that have on the machine
steep agate
<@745672959804571742> u broke the shreck machine
I did the basics, I just removed the id_rsa, and changed the passwords, the rest you can get shell at will
nor the failures in the web applications I corrected
lilac idol
do we use metasploit to exploit apache tomcat on port 8080
steep agate
I wanted to test something but I don't think it's possible in koth, it's kind of a shell breaker, when the person doesn't hide their pts, you break their shell, you can't even exit
steep agate
do we use metasploit to exploit apache tomcat on port 8080
this machine is full of fun entrypoint
lilac idol
only 11 minutes left
steep agate
only 11 minutes left
yeah
steep agate
that nothing, I'm just a koth user, like many others hahaha
graceful bear
π
steep agate
lol, the only thing i did was remove the id_rsa from gloria you were using to connect over ssh
brittle lotus
Is this new game? "Restart"
steep agate
Is this new game? "Restart"
no, I mean you restarted the machine like 5 times, still having several entrypoints
brittle lotus
5?
steep agate
3/4
brittle lotus
What is that?
steep agate
I thought they were trolling the game, if I patched the gloria user, 3 people were already clicking on reset, lol, I just thought it was funny
brittle lotus
After that I started playing. π€£
steep agate
π€£
steep agate
when I was going to score out of nowhere I saw about 3 people clicking on restart, then I: WTF WHAT'S HAPPENING, and I kept laughing
π€£
brittle lotus
Not the first time.
steep agate
yeah
steep agate
beauty, we are together flint, if you need we are there
@brittle lotus see you later
edgy knoll
all the criminal bosses are offline lol
lemme steal wins
@steep agate yyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyy
steep agate
<@745672959804571742> yyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyy
what ? lol '-'
edgy knoll
all the criminal bosses are offline lol
nothing nothing
steep agate
<@745672959804571742> yyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyy
What happened ?
steep agate
nothing nothing<:pepehands:658067905988001802>
oh
relax, I'm not even going to play, I'm just going to get root, if you want you can stay in king there
edgy knoll
relax, I'm not even going to play, I'm just going to get root, if you want you c...
oh ohk
steep agate
oh ohk
actually I'm going to stay in the king for 1 minute, I'm going to record the "demo" of something I intend to release
But don't worry, after I record, I take my nick from the king and leave the machine, for you to play
edgy knoll
finally someone with heart lol π
you guys keep beating the machine you've already played over and over
steep agate
you guys keep beating the machine you've already played over and over
actually, I think everyone here plays for fun, including me, koth is good because you train your "blue team" side, and it's good to do research related to defenses on linux machines, attack your opponent on the machine without using urandom, or things like that, defend your king, modifying attributes, learning to fix simple flaws like a command injection, an lfi, a file upload , among others, anyway, as far as I know, everyone plays for fun, including me too
sorry, my english is very bad hahahaha
edgy knoll
actually, I think everyone here plays for fun, including me, koth is good becaus...
yea tho i think chattr is a dumb thing lol it's annoying
edgy knoll
sorry, my english is very bad hahahaha
it's perfecto
steep agate
but chattr is not the only way to protect your king, actually chattr is one of them, but there are several
edgy knoll
but chattr is not the only way to protect your king, actually chattr is one of t...
I want to defeat it lol
edgy knoll
but chattr is not the only way to protect your king, actually chattr is one of t...
i know
steep agate
it's perfecto
with the help of google translate this saves my skin sometimes π€£
edgy knoll
I want to defeat it lol
any ideas ?
edgy knoll
with the help of google translate this saves my skin sometimes π€£
you'll get used to speaking in no time
steep agate
any ideas to "neutralize" chattr ?
steep agate
if anyone used chattr +i, to change attributes, just use -i, to remove attributes and put your name there
edgy knoll
to mess with the/root/king.txt algorithm i think
steep agate
if anyone used chattr +i, to change attributes, just use -i, to remove attribute...
you can also remove chattr from the machine, then the person will have to download the binary, upload it to the machine and then run it, I think that until they do that you will have enough time to protect some entry points
edgy knoll
you can also remove chattr from the machine, then the person will have to downlo...
oh noo other way
edgy knoll
you can also remove chattr from the machine, then the person will have to downlo...
pkill bro pkill
let go
steep agate
pkill bro pkill
but there is a way to "neutralize" this pkill of pts
steep agate
keep forgetting to open attackbox early
ready, I've done the tests, video and prints
now I'm out of the machine, good game
edgy knoll
yup am king thanks muahhhhhhhhhhhhhhhh
edgy knoll
yup also look at my keepsake
i beat a God π
joy
dont come back oh am kidding lol πββοΈ π¨
joking/kidding
steep agate
dont come back oh am kidding lol πββοΈ π¨
hahahaha relax bro, you got root on this machine much faster than the other players, good, I was testing something there, but it's already out of the machine, I'll post it on my github today
fossil pecan
actually I'm going to stay in the king for 1 minute, I'm going to record the "de...
Hey! Would love to hear more, or see when released π ... I've only been doing THM for a month, just started with KoTH last week, but I've been sysadmin for a long time, so I have enjoyed finding and making tools and tricks, but still have a lot to learn haha
steep agate
Hey! Would love to hear more, or see when released π ... I've only been doing T...
I think I'll post it today on github, hahaha how cool you are sysadmin, I think linux sysadmin is really cool too, I have several pdfs here about it, it's very good
@fossil pecan I also need to update my github, from tricks to koth, I will add more things too, add more things to defend linux machines, windows too, teach how to patch for example in a file upload, lfi, command injection, etc.
fossil pecan
nice, i'm excited to learn more, i'll be publishing some of my tools and stuff also ... linux only tho, i still need to learn windows π ... haven't used windows much since 2008-2010 lol
steep agate
nice, i'm excited to learn more, i'll be publishing some of my tools and stuff a...
2008-2010 ? lol
I must have been 5/6 years old at that time
π€£
fossil pecan
π
was my first college job as win sysadmin for uni ... but i ended up rebuilding most on linux
fuk IIS and all that old ASP crap
steep agate
damn, that's cool, very good
steep agate
fuk IIS and all that old ASP crap
π€£
so cool
@fossil pecan
I'll post it later today on my github
fossil pecan
nice
steep agate
fossil pecan
coming from system/devops engineer, it's really hard for me to not make (or try to) "autopwn" scripts haha ... I'm obsessed with scripts & automation
fossil pecan
very cool
steep agate
hahahaha, I wanted to take LPIC in the future
fossil pecan
LPIC?
fossil pecan
ah nice
i'm terrible with terms & acronyms haha ... but i know most of the fundamentals π
steep agate
hahahaha it's part
fossil pecan
i can't "remember" or "memorize" anything ... but i'm addicted to "understanding" everything
steep agate
I understand, how cool
steep agate
i can't "remember" or "memorize" anything ... but i'm addicted to "understanding...
Well, I think just from this conversation, I believe he's twice my age π€£
fossil pecan
haha ya maybe ... i'm a late bloomer π΄
steep agate
I turn 17y this month
steep agate
as I imagined, double
fossil pecan
almost dbl haha
steep agate
π€£
steep agate
almost dbl haha
yeah
well, the chat was good, I'll have to leave, and later I'll come back and I'll post it on github, see you later xD
naive cradle
Anyone up for some koth?
fossil pecan
starting up (beginner friendly) koth game(s), getting ready in the KOTH voice channel π
naive cradle
ok
fossil pecan
@steep agate i'm trying windows koth "offline" ... i'm on the box, found a flag ... found king.txt, and put my name in there .. not king tho? haha idk windows for shit
my name is in king.txt ... am i missing something on windows?
haha found a bunch more flags
no clue if/how king works on windows
edgy knoll
helo snipe
edgy knoll
no clue if/how king works on windows
does me too lol no clue
@brittle lotus look at my other keepsake
fossil pecan
@brittle lotus well played
I need to learn some more of those tricks haha
Just know mostly sysadmin things π
fossil pecan
<@612193987251535898> well played
edgy knoll
@steep agate
fossil pecan
@brittle lotus that really was awesome, haha you stumped me on a few things π ... GL on the rest of your games, i gotta go sleep haha
brittle lotus
<@612193987251535898> that really was awesome, haha you stumped me on a few thin...
It was great game.π π
brittle lotus
Just know mostly sysadmin things π
It is same for me. I am only sysadmin to like you.
brittle lotus
<@612193987251535898> look at my other keepsake
And that is ok. And this is borring.. π
fossil pecan
It is same for me. I am only sysadmin to like you.
Haha, we should hang out in voice sometime and chat
brittle lotus
Haha, we should hang out in voice sometime and chat
We will. I need to learn english better.
brittle lotus
last minute lol
Hahhahaha.... Reset master. It was fun.
edgy knoll
sorry he gave me the match to play it he would've killed me if I lost
edgy knoll
last minute lol
to beat a god you have to cheat
steep agate
<@745672959804571742> i'm trying windows koth "offline" ... i'm on the box, foun...
sorry, at that time I was already sleeping like a stone π€£
steep agate
And that is ok. And this is borring.. π
just kill your while loop with king
and that's it, then you put your name on the king i, it's very easy hehehe, neutralized π π
using this here in koth would be OP, but I think it's forbidden π€£
steep agate
edgy knoll
and that's it, then you put your name on the king i, it's very easy hehehe, neut...
idg
the last time we wanted to do a reset loop
against you
you added your dummy account
steep agate
you added your dummy account
lol it was not my account, i called a friend of mine to play too, since everyone was together against me in loop, he plays koth sometimeso, g3n is good, i think he knows more than me
edgy knoll
lol it was not my account, i called a friend of mine to play too, since everyone...
oh whats yoour write up link
steep agate
he plays sometimes, but this birdhead never plays with me π¦
edgy knoll
oh whats yoour write up link
I play against my boy @fair meteor although he spanks me everytime π
steep agate
oh whats yoour write up link
what ?
edgy knoll
we play together I'm commanding his moves he's typing lol
steep agate
I play against my boy <@944355860887511060> although he spanks me everytime π
he is also good, these days he was asking me for some tips and i advised him
edgy knoll
he is also good, these days he was asking me for some tips and i advised him
he's fast
my wpm is as fast as my username
steep agate
for me you can take me out of king at will, i just want to train my skills with linux defense in koth
edgy knoll
for me you can take me out of king at will, i just want to train my skills with ...
oh seriously
steep agate
oh seriously
yeah
edgy knoll
You really sound like a od π lol
ask and it shall be given unto u
steep agate
oh seriously
lately I've seen more things about defense on linux machines, hidden process, etc.
steep agate
You really sound like a od π lol
ask and it shall be given unto u
that nothing, I'm just one more, there are people better than me, I'm just training
steep agate
the battlegrounds hackthebox level is very good, it doesn't have so many entrypoints, it's fun, but too bad you can only play 2x a month, and practice is unlimited
steep agate
but KoTh is a good place to train your skills with linux defense, but not only like koth, there are other labs to train too, skills with linux, sysadmin, and etc, for example, iptables cannot be used, which certainly a sysadmin would use, it's much smaller, but fun
prisma roost
he could've just emptied the path export PATH='' not necessarily cheating
edgy knoll
i want to report someone
this is bloody
edgy knoll
he could've just emptied the path `export PATH=''` not necessarily cheating
hmm whatever
prisma roost
hmm whatever
check the binaries in /usr/bin
steep agate
this guy cheats more than you lol <@745672959804571742>
lol, but I don't use cheats, I even use very newbie techniques against you guys
just remove the id_rsa key that no one else tries to own the machine kkk.
or else change the user ssh password
I always try to get shell in different ways, for example I found a new one, with a recent cve
prisma roost
if it's pwnkit, it's overrated, if I play I always do chmod -s $(which pkexec)
steep agate
if it's pwnkit, it's overrated, if I play I always do `chmod -s $(which pkexec)`
pwnkit to make sure I'm rooted, and change the root password, and that of other users, then I exit and try to get a different shell and root
but it's ok, you can team up against me, resets, do what you want, I play 4fun XD
prisma roost
also, congrats on the top 1 position in koth π₯³
edgy knoll
check the binaries in `/usr/bin`
idc π‘ next match i'm removing etc var and bin folders
i dont have joy again π
brazen cloud
there's the appropriates channels to report someone (koth@tryhackme.com)
steep agate
also, congrats on the top 1 position in koth π₯³
thank you! I was so addicted that when I saw it I had already played it about 50 times, and it's worse than drugs
sour vectorBOT
Gave +1 Rep to @prisma roost
steep agate
thank you! I was so addicted that when I saw it I had already played it about 50...
I think this month I'll stop playing koth, and I'll leave some defense techniques, shell x shell, hidden process/tty/pts/ , defenses in king, correcting web flaws, among others, playing 4fun is the best thing, you have fun, and learn new things by researching
in my github/ytb channel
lilac idol
fair meteor
@edgy knoll lol he deleted binaries
fair meteor
"badass are coming soon" π
@prisma roost lol i mean there are just guru's
summer needle
hey i'm pretty new can i do the koth one day?
lilac idol
hey i'm pretty new can i do the koth one day?
you have to change your experience on your profile to play
fair meteor
hey i'm pretty new can i do the koth one day?
Yeah
edgy knoll
And that is ok. And this is borring.. π
@fair meteor look lol π
I lost your match I'm so sorry π
edgy knoll
last minute lol
due to heavy cheating I won πͺ π
you owe me two matches now lol
brah this dude lol
lilac idol
brah this dude lol
i hope he dont join our game
edgy knoll
i hope he dont join our game
oh your there
lol
pray although i only fear 3 people
matt mug flint
lilac idol
yeah im right here
edgy knoll
and @fair adder he's been offline since idk y
fair adder
what
lilac idol
yeah you have to take notes
fair adder
oh hello boss
π
fair adder
Hii
edgy knoll
havent seen you in a while
lilac idol
are you a pentester
fair adder
yes Red Teamer
lilac idol
nice
edgy knoll
oh my buddy use to say if it's windows @fair adder will win lol
fair adder
ya
lilac idol
i hate the windows machines
edgy knoll
good luck @sinful moat
fair adder
ok
lilac idol
hahah
fair adder
tell me when you start new game
lilac idol
good luck <@469612866538831884>
goodluck
edgy knoll
https://tryhackme.com/games/koth/join/448541d7e96a17d30de6d6cf
am connecting with my buddy' account
lilac idol
tell me when you start new game
you joined it
fair adder
am connecting with my buddy' account
ok
lilac idol
in order to be the best you have to beat the best
lilac idol
i have tried lol he is good
fair adder
No I don't like this box
edgy knoll
lol its not windows
fair adder
yes π
lilac idol
no hope for me
there is hope
edgy knoll
mr niko is in there
fair adder
yes
lilac idol
Niko why havent you got in yet
lilac idol
why
lilac idol
mr niko is in there
you took anonymous ftp down
lilac idol
you did
edgy knoll
idc π‘ next match i'm removing etc var and bin folders
i dont have joy agai...
I dont have joy people
lilac idol
i have to log off my mac
and use kali
i try to use my mac with homebrew run into problems
edgy knoll
i didnt see this one that's why tho
fair adder
π
edgy knoll
π
i didnt know how i enterd i mean when
if it's windows i cant even dream of winning
fair adder
π₯²
fair adder
Yes π
potent parcel
welcome to the second round
edgy knoll
what's with the face π round 2
I'm saying prayers RN
lord may it not be windows π
fair adder
Xd
edgy knoll
welcome to the second round
ah welcome bro but this is personal
play with you next time lol battery low
@fair meteor i beat your idol π
fair adder
bye bro
fair meteor
<@944355860887511060> i beat your idol π
hahaha
unborn anchor
fair adder
Ohk
@steep agate one Guy was telling that to be best you have beat the best.
so i tell him beat you.
lilac idol
are you guys playing still
fair adder
no
summer needle
Yeah
for sure just looking for some people to play with. I still wanna knock out a couple more rooms before I try KOTH
fair meteor
@summer needle U should KOTH is kinda more of like been fast
steep agate
<@745672959804571742> one Guy was telling that to be best you have beat the best...
in fact, you just play several times, the more you play, the more you learn, the more you lose, the more you feel the pleasure of knocking everyone down, you search for knowledge
steep agate
<@745672959804571742> damn i need your writeup
but what writeup? the only thing i have like this is viddos on my channel about koth
edgy knoll
github
fair meteor
but what writeup? the only thing i have like this is viddos on my channel about ...
@steep agate Wats ur channel name
fair meteor
Thanks
fair meteor
The kinda situation am in now is complex
I got root for 10secπ
@steep agate U killed my shell
whhhhhhhhhhhhhhhhyyyyyyyyyyyy
steep agate
lol
fair meteor
I really don't know how to use vim fast
I was like shit "pressing delete key"
He's gonna get in back soon
And before i know boom i saw a broadcasted message saying bye
I then knew that was the end
Besides hw did u do that
steep agate
```kill ps aux|grep sshd|grep pts|awk '{print $2}';echo "bye";
π π
well I'm going to bypass the XDR, good game bro, if you need just give me a touch here @fair meteor
fair meteor
```kill `ps aux|grep sshd|grep pts|awk '{print $2}'`;echo "bye";
```
Nice tanx
lilac idol
The kinda situation am in now is complex
you have to beat the best to be the best
naive cradle
big dub
fair meteor
@lilac idol I challange u to a duelπ
fair meteor
@near lily lol lets play
jovial field
anyone up for koth? https://tryhackme.com/games/koth/join/3c3058eda9c80c11549c3429
(starts in ca. 20min)
jovial field
nice
fair meteor
https://tenor.com/view/the-last-duel-ridley-scott-medieval-2021-movies-gif-22727...
@lilac idol Am here!
lilac idol
invite
stiff egret
can I join? π
stiff egret
ah, I'll pass then. Have fun y'all π
Just got back home, setting up everything now. Gonna take a while.
I thought it'll be standard 25 mins wait
fair meteor
ah, I'll pass then. Have fun y'all π
I'll send the next link not sure i'll win this one @steep agate Is here
fair meteor
I thought it'll be standard 25 mins wait
Yeah I kinda started it before I sent the link
dry fossil
@lilac idol Yh I didn't touch perms in /tmp
lilac idol
you did what to get root
dry fossil
Idk about that, I was careful not to mess with file perms because I didn't want to break a rule by accident
one sec
prisma roost
https://tenor.com/view/duel-slap-glove-i-challenge-you-to-a-duel-homer-gif-16137...
play koth π₯Ί
dry fossil
lilac idol
i thought you did
dry fossil
Using the bobba user
lilac idol
fair meteor
https://gtfobins.github.io/gtfobins/find
carnage
lilac idol
but how did you privesc
dry fossil
that was the privesc
lilac idol
from duku
dry fossil
Oh the password for bobba was in the db
lilac idol
i was trying to privesc from duku
dry fossil
and so I used python to create a shell and used that with su -l bobba and the password I found to get in
lilac idol
with this
fair meteor
strings web.db
lilac idol
fair meteor
Yeah that was the issue, duku had no suid bit executables
I think 3 suid perm
dry fossil
yeah
lilac idol
you found it in the database
dry fossil
Yeah
lilac idol
bobba
steep agate
<@745672959804571742> Whhhhhhhhhhhhhyyyyyyyyyyyyyyyyyyyyy
what ?
lilac idol
DB browser
dry fossil
Yep
lilac idol
lets play again
dry fossil
I'll play shortly, need a piss π€£
fair meteor
scan every port
lol that will take time am playing koth hogwarts
fair meteor
it could be on a random port
yh
lilac idol
lol that will take time am playing koth hogwarts
i have only played like 3 machines so far
steep agate
Like what ports do I scan
π
dry fossil
I tried hogwarts and failed miserably
although I was distracted as I was helping mates with their course work
That was my second time on carnage though
steep agate
Like what ports do I scan
you get the first access on ftp
dry fossil
you get the first access on ftp
I presume it was anonymous access?
fair meteor
you get the first access on ftp
Yeah I know
steep agate
I presume it was anonymous access?
yeah
fair meteor
Yeah
dry fossil
Just because I tried it with nc and it didn't seem to complain but for some reason when I used the ftp client it complained
lilac idol
yeah if you play someone who plays this a lot then good luck
they already know every machine
fair meteor
you get the first access on ftp
The ports changes and i don't know the port range to use
dry fossil
and I couldn't be bothered figuring it out because I was distracted
lilac idol
-p-
dry fossil
yeah if you play someone who plays this a lot then good luck
Was definitely good fun to play against you π
dry fossil
that will take time
rustscan
steep agate
very OP lol
dry fossil
and then for particular versions manually do an nmap service version scan on those ports
I found that ideal
lilac idol
Was definitely good fun to play against you π
yeah it was fun to play against you too, good game
fair meteor
very OP lol
U're hiding ur pts right?
fair meteor
yeah it was fun to play against you too, good game
let's play
lilac idol
yeah use rustscan
steep agate
U're hiding ur pts right?
yes, I like to do a lot of research involving linux, and I test sometimes not always on koth, I play koth for that, and for the fun too ahueaheha, to see people trying to root/shell
lilac idol
yeah
fair meteor
yes, I like to do a lot of research involving linux, and I test sometimes not al...
@steep agate lol
So is it going to be on github
near lily
play koth π₯Ί
prisma roost
<:blobno:658062672520019983>
steep agate
π
steep agate
So is it going to be on github
in the future yes, there are several features
lilac idol
such as what
steep agate
such as what
one of them is you run a command in some other terminal, you make the person unable to exit the machine, you lock him in a restricted shell, and so on, there are several things
fair meteor
in the future yes, there are several features
Nice
lilac idol
mathew said this is old but i havent seen one better than this https://noxtal.com/cheatsheets/2020/08/08/ultimate-koth-defense-guide/#remove-user-from-sudoers
steep agate
mathew said this is old but i havent seen one better than this https://noxtal.co...
it's old, look at the date, but it still works on koth machines
dry fossil
I have no clue with this one icl
lilac idol
UEsDBAoACQAAAJadq1RMPeimHwAAABMAAAAJABwAY3JlZHMudHh0VVQJAAMcBHxiHAR8YnV4CwAB
BAAAAAAEAAAAANsLE1t+lexRf5gWwdTJB0nMZHLf++BKaOdVpGT2HuFQSwcITD3oph8AAAATAAAA
UEsBAh4DCgAJAAAAlp2rVEw96KYfAAAAEwAAAAkAGAAAAAAAAQAAAKSBAAAAAGNyZWRzLnR4dFVU
BQADHAR8YnV4CwABBAAAAAAEAAAAAFBLBQYAAAAAAQABAE8AAAByAAAAAAA=
dry fossil
I found that and have no clue what to do with it
lilac idol
i found this on port 3333
lilac idol
I presumed it was b64 but it's not
me too
it could be encoded multiple times
in different encodings
i tried anonymous ftp
dry fossil
yeah that didn't work for me
lilac idol
MatheuZSec
fair meteor
it will have credentials to login as fortuna
fair meteor
UEsDBAoACQAAAJadq1RMPeimHwAAABMAAAAJABwAY3JlZHMudHh0VVQJAAMcBHxiHAR8YnV4CwAB
BAA...
base64 to file
lilac idol
PK
οΏ½ οΏ½οΏ½οΏ½ΒΒΒ«TL=è¦ οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½ οΏ½ οΏ½creds.txtUT οΏ½ |b |bux οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½Γ [~ΒΓ¬QΒΓΓΓIΓdrΓûà JhΓ§UΒ€dΓΆ Γ‘PKL=è¦ οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½PK
οΏ½ οΏ½οΏ½οΏ½ΒΒΒ«TL=è¦ οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½ οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½Β€ΒοΏ½οΏ½οΏ½οΏ½creds.txtUTοΏ½ |bux οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½PKοΏ½οΏ½οΏ½οΏ½οΏ½οΏ½OοΏ½οΏ½οΏ½rοΏ½οΏ½οΏ½οΏ½οΏ½
it says creds.txt
fair meteor
PK
ΒΒΒ«TL=è¦ creds.txtUT |b |bux Γ [...
use this website https://base64.guru/converter/decode/file
lilac idol
it put a password on the zip
dry fossil
lilac idol
when i downloaded it
fair meteor
yeah
dry fossil
I got the creds
fair meteor
it put a password on the zip
use john the ripper
zip2john application.zip > hash
john -w=/usr/share/wordlists/rockyou.txt hash
then get the cred
dry fossil
the login isn't working for ftp
fair meteor
he already got all 7 flags
lol he's good
fair meteor
the login isn't working for ftp
ssh
dry fossil
I tried that but I'll try again ig
lilac idol
he probably changed the password
fair meteor
he probably changed the password
yeah
lilac idol
by now
fair meteor
lol Thats the first thing to do
steep agate
π
dry fossil
yeah ssh is patched along with ftp
fair meteor
yeah ssh is patched along with ftp
There's no hope
dry fossil
yeah we're already locked out
dry fossil
Unfortunately the only alternative is trying to find a vuln in the webpage
which is unlikely
or those "random" ports anyway
near lily
I might play Koth. π€
dry fossil
the ports are locked off
lilac idol
search Apache/2.4.29 vulnerabilities
dry fossil
there's not much for it really
lilac idol
even if you get in he will kill the shell right away
steep agate
even if you get in he will kill the shell right away
I will not kill the shell, feel free to try to get root, and remove my name from king
dry fossil
Have you left anything open? π
steep agate
even if you get in he will kill the shell right away
I put your name on the king for you to be merry xD
dry fossil
Anything left vulnerable at all?
lilac idol
I put your name on the king for you to be merry xD
lol thanks
sour vectorBOT
Gave +1 Rep to @steep agate
dry fossil
Just wondering whether to bother trying still for now or wait till the next game
near lily
port 80 http webserver
May I DM?
steep agate
good for today enough koth, thanks guys, it was a great game!
fortuna password : loveitachi
I put this password now, if you still want to play
@lilac idol@dry fossil
lilac idol
did you view creds.txt
lilac idol
do you want to play again
dry fossil
can do
lilac idol
I might play Koth. π€
lets play
dry fossil
the file share is stuck mounted
ffs
Imma head off for now actually, am quite tired, will be on tomorrow tho
manic palm
Do the machines change? Like can't you just automate it once you've already done it?
wind fjord
I think Hackers and maybe like 1 or 2 other machines have dynamic flags and passwords so you canβt exactly script those ones as easily, but yeah
wind fjord
Autopwns arenβt allowed because of the rules in place, but thereβs nothing else stopping you other than being reported by other players and an honor code π€·ββοΈ
manic palm
Makes sense
wind fjord
Most of the action for people who play this a lot is being on the box and reacting to other peopleβs defenses/trolls/traps quickly enough
steep agate
Do the machines change? Like can't you just automate it once you've already done...
if you use autopwn you will be banned, it is forbidden
fossil pecan
Makes sense
You playing KoTH? I'm finishing work and eating dinner, probably gonna get back on THM for a while if you're still around π
stiff egret
Autopwns arenβt allowed because of the rules in place, but thereβs nothing else ...
'Honor code' is probably the best way to say it.
quiet schooner
I think Hackers and maybe like 1 or 2 other machines have dynamic flags and pass...
No dynamic flags on any.
Dynamic passwords or more box components on Hackers, Fortune, and Hogwarts
edgy knoll
its pretty lively today
edgy knoll
No dynamic flags on any.
Dynamic passwords or more box components on Hackers, Fo...
yea that's the best knowing the passwords already is prolly cheating already
dry fossil
How many flags are there in carnage?
fossil pecan
@graceful bear GG! almost caught up haha, just found 2nd flag as game was ending π ... only 2 on that box? probably more just harder to find?
dry fossil
just seen it's ending in 3 minutes tho
fossil pecan
all good, it put me into another food game π
fossil pecan
same
dry fossil
got 7 on carnage
fossil pecan
lmk how many flags you manage to get, I found 6
found 7th flag!
haven't seen any activity from the others playing in this game π¦
dry fossil
Oooh, where was the 7th?
wait do you mean the one in /home/tryhackme
called flag7 or do you mean you found 7 overall (just checked and congrats on getting 7 I had no clue and used the find functions so I presume it was hidden inside a file or something)
dry fossil
ahh fair enough, will get it next time
fair adder
i used to play with someone who would change the flags
fair meteor
Someone deleted binaries
lilac idol
Someone deleted binaries
lets go
fair meteor
yEAH
lilac idol
oh okay
fair meteor
Nice
fossil pecan
Any games going on?
nova tide
to change the flags
Yes it's against rules
fossil pecan
yeah we got a game
got a join link? just joined public, but next isn't for 25m π¦
fair meteor
Any games going on?
Yeah
lilac idol
the game already started sorry
fair meteor
My wifi is down
fossil pecan
the game already started sorry
ok
fossil pecan
the game already started sorry
i thought you could still join late ... sometimes it puts me in games near the end haha, but now i'm 20m away in a game by myself π
lilac idol
i thought you could still join late ... sometimes it puts me in games near the e...
i was in but he killed my shell or something
im locked up
this guy is cheating
bad
fair meteor
i did not kill ur shell
I removed the authorized keys
so u won't login with the id_rsa
lilac idol
idiot
fair meteor
and made my terminal fcked up
I just sent random messages
fossil pecan
lol ya seems like someone tanked this sytem ... no user names for ids, and /etc/ssh is gone entirely π€
fair meteor
there's actually /etc/ssh
lilac idol
youre getting banned
fair meteor
youre getting banned
bro what did i do
fair meteor
U are root also
fair meteor
empty dir? haha
No authorized keys
fossil pecan
youre getting banned
i don't think this was @fair meteor fault btw
lilac idol
it was
fair meteor
Then generate another id_rsa
fossil pecan
/etc/ssh is the entire sshd server config π
fair meteor
my terminal said 999+ things popping up
Really??
fossil pecan
i got urandmed too lol
lilac idol
hes cheating
fossil pecan
part of the game
lilac idol
im reporting you for messing my terminal up
lilac idol
I just wanted to make it fun
youre getting reported
fair meteor
im reporting you for messing my terminal up
fair meteor
oh shit that other game started lol
link to the game
strong spear
Finally, I'm become to winner of the KOTH.
fair meteor
Oh mug3 is there nvm
fossil pecan
someone fuked this box, or really fking with my sessions somehow lol
bash: /usr/bin/ls: No such file or directory
bash-4.2# id
id
bash: id: command not found
bash-4.2# echo $PATH
echo $PATH
/usr/local/bin:/usr/bin
bash-4.2# export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
bash-4.2# ls
ls
bash: ls: command not found
bash-4.2# sh
sh
bash: sh: command not found
bash-4.2# /bin/sh
/bin/sh
bash: /bin/sh: No such file or directory
bash-4.2#
lets play then
fair meteor
```
bash: /usr/bin/ls: No such file or directory
bash-4.2# id
id
bash: id: comma...
which machine
strong spear
but I didn't received KOTH winner badge. why?
fair meteor
but I didn't received KOTH winner badge. why?
lol did u get root
strong spear
Yes
strong spear
H1:Hard
strong spear
I didn't access the got king.txt but I see this king.txt file.
fair meteor
U should have put ur name in king.txt file
Though u won
Cause u had much flags than ur opponent
lilac idol
U should have put ur name in king.txt file
dont use that script again
it made my computer lock up
quiet schooner
@lilac idol You were told where to take accusations of cheating.
fossil pecan
@graceful bear i wanna find those other 2 flags!! haha i'm only at 5 π
graceful bear
oh there's 8?
yeap
fossil pecan
we're getting record for king changes on the koth page game list π
fair meteor
dont use that script again
Okay
fair meteor
it made my computer lock up
Sorry
quiet schooner
Okay
Spamming terminals isn't against the koth rules, they're just being a sore loser
fair meteor
Help!
My kali machine isn't connecting to the internet
So I have been using kali on thm
fair meteor
Anyone online
steep agate
you are cheating
urandom not cheating
lol
I have worse things than urandom, you won't even be able to get out of the shell, and that's not cheating either, it's part of the game, it's the same as spawning nyancat, it's not cheating lol
steep agate
Nice worse things
I'm updating my koth tricks repository, it should be ready by 16/15/17
dry fossil
gonna have to work on the unprotect version π€£
set +o noclobber and whatnot
new box To try, pretty happy for a first attempt
steep agate
gonna have to work on the unprotect version π€£
this script is very beginner, i used it when i had only 50 wins around in koth, then i just put animation, lol
π€£
steep agate
this script is very beginner, i used it when i had only 50 wins around in koth, ...
and it was with the intention of helping beginner players, but anyone can unprotect it, just know how to google and search @dry fossil
dry fossil
Fair enough π
How would you have gone about undoing chattr removal, just re-add a binary?
steep agate
yes, just add the chattr binary again
buuuuuuuuuuut
if you leave wget, curl, etc, and leave these binaries only for those who are root, your opponent will not be able to put chattr on the machine, nor any exploit to be able to escalate privileges, but there is a way to "neutralize" that, you can also do it upload binaries, exploits etc, using ssh
another thing for an "add-on" would be to remove the gcc or the lib that gcc uses, so your opponent won't be able to compile on the machine π€£
dry fossil
Yh that being said, you could use a netcat output to file
steep agate
yeah
dry fossil
and if nc is removed or not present &> /dev/tcp/ip/port will work
steep agate
if you leave wget, curl, etc, and leave these binaries only for those who are ro...
we need to think about how your enemy would do it, certainly after that he wouldn't try, or he would click on reset or he would whimper, and about removing nc, I believe that "remove " can't, but leave it only for those who are root yes
well i never tested removing netcat from koth machine, so i can't give you a certainty @dry fossil
dry fossil
yh however they shouldn't really be resetting the machine just because they can't get in
steep agate
but that's exactly what happens, for example
you couldn't enter the user who had that password, after that there are people who don't even try anymore, they just leave by clicking on reset and enter the next game, so I say you have to think how your enemy would make the machine, and the steps
dry fossil
Well yeah, ig, I just go to /games/koth and join another one that way if I'm locked out entirely
at least once I've tried finding a new entry point
steep agate
at least once I've tried finding a new entry point
that's what I want to tell you, people don't look for new entrypoints, they just use the same things and then if you couldn't click reset, or reset the machine, and if you didn't succeed again go to the next room
although, at most, there are 5/6 entry points on some machines, not all
I'm thinking of quitting koth, I've already reached my goal, and I had a lot of fun playing koth, met some brilliant people
graceful bear
I'm thinking of quitting koth, I've already reached my goal, and I had a lot of ...
you keep saying this...butπ
fair meteor
lol its so addictive hahaha
dry fossil
π€£
manic palm
Do games run regularly or do I need to queue with people?
I might start this weekend lol. Intimidated but looks so fun
fossil pecan
lol its so addictive hahaha
haha i know, right?!? i'm still just getting familiar with all the koth stuff, can't wait to learn more π ... i need serious help on windows lol, i had admin last windows box, but writing my name in king.txt ... never registered my as king π¦
idk shit about windows π
fossil pecan
Do games run regularly or do I need to queue with people?
you can always start a private match, which is essentially join by link only (to whoever you wanna share/party with)
or the "join public" game option will try to group up ppl for regular games, more like video game matchmaking
fair meteor
haha i know, right?!? i'm still just getting familiar with all the koth stuff, c...
haha I've experienced that
cerulean summit
exotic glade
Anyone wanna play koth?
naive goblet
would play if shadow was not planning on sleeping soon thanks to it being past midnight
fair adder
This is probably an obvious question, but it's not obvious to me. Given the fact that everyone uses their own system to log into the same machine, are there any possible leaks of data or information that could occur?
jovial field
This is probably an obvious question, but it's not obvious to me. Given the fact...
Not really, if you use windows 7 or some other trash system someone could try to attack your machine but this is forbidden
quiet schooner
This is probably an obvious question, but it's not obvious to me. Given the fact...
They might get your VPN IP.
That's not really sensitive. Assuming you keep reasonable security measures - you don't punch gaping holes in Kali's security - you'll be fine.
exotic glade
would play if shadow was not planning on sleeping soon thanks to it being past m...
Shadow if you are up for koth today let me know π
dry fossil
@graceful bear gg, where was that 7th flag that u found, I found two entry points and got the flags in the home directories and iirc one from a db
dry fossil
ahh
when you got root how'd you go about it? Did you escalate through neville using the ip suid?
That was my first way onto root but towards the end I found one file that led me to 3 other files and gave me access to a backdoor-esque thing
I did try and upload a reverse shell to the resume-upload and succeeded but it didn't seem to work, I also noticed wget and nc weren't working to connect to my webserver so I presume you set something up but that was good fun, first time on that one. I think I did fortuna twice and am still finding stuff on that. I want to try and find some new entry points on carnage as I've done that a few times now and I tried shrek the other day π€£
graceful bear
when you got root how'd you go about it? Did you escalate through neville using ...
yeap..using ip
graceful bear
That was my first way onto root but towards the end I found one file that led me...
interesting
graceful bear
I did try and upload a reverse shell to the resume-upload and succeeded but it d...
yeah...hogwarts misbehaves when you try drop a file from a webserver, not sure why
it's always good to go through the machine after getting root..there's always some juicy stuff to find
dry fossil
yeah, I ended up sticking to the machine and not trying to do the webserver stuff, only reason I tried at first was to try and move across laterally to try and get a flag
steep agate
@graceful bear
graceful bear
steep agate
<:anidab:623335162595508235>
lilac idol
is that your desktop background
edgy knoll
aiyo
random trellis
my reminder is already on
random trellis
we got history
hahaha, what history lol
edgy knoll
hahaha, what history lol
aiyo you beat me once never again
I've been beating gods at level 1 i have alot of keepsakes
i want to add your name lol π
edgy knoll
actually i am busy in my exams these days, so not playing koth
aiyo i'm 15
writing final year exams
also
random trellis
nice i got messages from many koth players and most of them were 15-16
and thats great lol
all of them were good in ctf
random trellis
hmmm
i know this happened three days regularlyπ
when my exams were not started
i am 20 btw lol
edgy knoll
when my exams were not started
oh another god just entered our match lol
edgy knoll
i am 20 btw lol
oh which class
random trellis
yess theak
edgy knoll
university right lol
random trellis
oh which class
college, second year is about to end next month
edgy knoll
college, second year is about to end next month
I'm free after next month grade 12 is over lol
idk what to do with my time
edgy knoll
yess theak
if it's a windows bot i'll just leave
random trellis
if it's a windows bot i'll just leave
i also hate windows
i think i have to learn powershell nowπ havnt mastered it yet
edgy knoll
i think i have to learn powershell nowπ havnt mastered it yet
God like you π
random trellis
π€£ π€£
edgy knoll
i think i have to learn powershell nowπ havnt mastered it yet
Linux is so simple and straightforward
windows is blehhhhhhhhhhhhhhhhhhhhhhhhhhhhhh π
but that's what i use lol
edgy knoll
only parrot os
boss that's my dream stop using windows
maybe a spare windows for gaming lol
random trellis
i used windows 10 for a month only
after that changed my os
parrot os is light weight and good
edgy knoll
me vs your country
random trellis
me vs your country
yess
edgy knoll
aiyo hands up for the boss
random trellis
aiyo hands up for the boss
hahaha
i saw you in lol
you changed password too, if i m not wrong
edgy knoll
you changed password too, if i m not wrong
yup
you came in early
pkill is illegal π
edgy knoll
my pts was 1 and your 0
i noticed
was focused on putting my name in king
that's why
lol next time
pkill pts/1
rm -rf /bin
random trellis
was focused on putting my name in king
when you were doing that i was busy on deleting ssh files and changing all passwordsπ
i did king after that
edgy knoll
rm -rf /bin
next time rm -rf /usr/bin no joy
random trellis
next time rm -rf /usr/bin no joy
π
graceful bear
when you were doing that i was busy on deleting ssh files and changing all passw...
interesting
random trellis
interesting
yoo bro, had good match with you yesterday, but i lostπ₯²
graceful bear
the match was super fun!!! very competitive
random trellis
king changes more than 20 times bruh, but at last i gave up because you had more flags than me
graceful bear
πΉ
random trellis
https://www.youtube.com/watch?v=jz5H2SBjdEg
2 hrs left
fair adder
https://www.youtube.com/watch?v=jz5H2SBjdEg
π
steep agate
2 hrs left
yes, it was 15 minutes, and even then I couldn't put everything I wanted to put in, but I put the essentials to win an entire match
fair adder
Btw congrats on 1k
steep agate
Btw congrats on 1k
thanks xD
sour vectorBOT
Gave +1 Rep to @quartz snow
random trellis
yes, it was 15 minutes, and even then I couldn't put everything I wanted to put ...
congrats, it will be the first video on koth tips and tricks on youtube
steep agate
the video was speechless, but before starting with the tricks, I put what it would be, I'm Brazilian and my english is not very good π
steep agate
congrats, it will be the first video on koth tips and tricks on youtube
yeah
fair adder
Time to defeat @steep agate with his own tricks 
random trellis
the video was speechless, but before starting with the tricks, I put what it wou...
your all videos are speechless π
steep agate
Time to defeat <@745672959804571742> with his own tricks <:bee:64536322938765315...
π€£
random trellis
Time to defeat <@745672959804571742> with his own tricks <:bee:64536322938765315...
he said these are not all, it means he have many more hiddenπ
steep agate
Time to defeat <@745672959804571742> with his own tricks <:bee:64536322938765315...
the only one who managed to make 26 king changes was , he is @graceful bear really good, it was a great fight and game
fair adder
the only one who managed to make 26 king changes was , he is <@70406167758215584...
I see
steep agate
your all videos are speechless π
it's because I didn't have a microphone, but now I do, the next one will be with a voice
steep agate
he said these are not all, it means he have many more hiddenπ
yeah, that was the essential to win the match
random trellis
<:cri:631271644287074334>
i can feel youπ₯²
steep agate
2 hrs left
random trellis
https://www.youtube.com/watch?v=jz5H2SBjdEg lets gooo
i am already watching bro
steep agate
i am already watching bro
xD
graceful bear
https://www.youtube.com/watch?v=jz5H2SBjdEg lets gooo
smooooth vid!!!
edgy knoll
smooth intro
naive goblet
https://www.youtube.com/watch?v=jz5H2SBjdEg lets gooo
nice guide... though you should probably add some way to get the code for the tools you used in the video.... otherwise thanks for the tips
sour vectorBOT
Gave +1 Rep to @steep agate
steep agate
smooooth vid!!!
π
steep agate
smooth intro
Yeah π
steep agate
nice guide... though you should probably add some way to get the code for the to...
yes, I will gather the tools in the video, and other tools in a repository
edgy knoll
Gave +1 Rep to **<@745672959804571742>**
i want one of this
naive goblet
i want one of this
want a tip on how to get rep points quickly on this discord??? help people out in the support channel catogery
lilac idol
i want one of this
thanks
sour vectorBOT
Gave +1 Rep to @edgy knoll
edgy knoll
Gave +1 Rep to **<@800814635744886859>**
eh thanks lol π
edgy knoll
want a tip on how to get rep points quickly on this discord??? help people out i...
eh okay
lilac idol
let's play a privte game me you pkill disallowed
okay after this game one sec
hushed rose
yo anyone know hot to fix this
really need help to fix this one
banging my head against the wall
naive goblet
have you made sure there is an empty line at the end of the id_rsa file???
hushed rose
have you made sure there is an empty line at the end of the id_rsa file???
yeah someone help med and pointed that out
hushed rose
have you made sure there is an empty line at the end of the id_rsa file???
i dont know that deep about rsa files and so on im just stupid
random trellis
https://tryhackme.com/games/koth/join/175b3ae80080a8109c1adf6f
fuck i am late
joined
lost without doing anythingπ
lilac idol
lost without doing anythingπ
can you find another way in?
random trellis
can you find another way in?
yess every machine have 4-5 ways but my match with hack.you is about to start bro
so focusing on that
lilac idol
yess every machine have 4-5 ways but my match with hack.you is about to start br...
come on
random trellis
come on
ssh is misbehaving idk why, port 22 opens and closes
i did rustscan many times
random trellis
i think he changed ftp password for gcrawford
the backdoor is vuln
you can brutefore it
with username plague
lilac idol
hydra -l plague -P /Users/drec/wordlists/rockyou.txt 10.10.161.15 http-post-form "/backdoor/:ed=^USER^&pw=^PASS^:F=Incorrect"
does this look right
random trellis
hydra -l plague -P /Users/drec/wordlists/rockyou.txt 10.10.161.15 http-post-for...
its http-form-post "/api/login:
nova tide
hydra -l plague -P /Users/drec/wordlists/rockyou.txt 10.10.161.15 http-post-for...
||/api/login:username=^USER^&password=^PASS^:Incorrect credentials||
also use -t to use more threads.
random trellis
||/api/login:username=^USER^&password=^PASS^:Incorrect credentials||
yoo bro, why you left koth
long time no see
nova tide
got busy with daily routine and job.
random trellis
great
lilac idol
||/api/login:username=^USER^&password=^PASS^:Incorrect credentials||
okay thanks
sour vectorBOT
Gave +1 Rep to @nova tide
lilac idol
its http-form-post "/api/login:
thx
i got the credentials from plague but it redirects me to backdoor/shell and i get a 404 not found
random trellis
<:upvote:638054507409965086>
sorry i went offline, was doing some work
random trellis
i got the credentials from plague but it redirects me to backdoor/shell and i ge...
maybe hack.you deleted it from html files
well @lilac idol this machine has many users you can go with like gcrawford, rcampbell, production, plague
rcampbell has the weakest password among all in ssh, so firstly go with it and then with other users
lilac idol
sorry i went offline, was doing some work
are you still playing?
random trellis
are you still playing?
no lol
i left long time ago
i am not playing koth alot from some days because my exams are goingπ₯²
lilac idol
are you going to college in india?
random trellis
are you going to college in india?
yess
lilac idol
nice and good english for being indian
random trellis
nice and good english for being indian
well i am from northern part of india and here we dont use hindi, our all subjects are in english
lilac idol
well i am from northern part of india and here we dont use hindi, our all subjec...
do you plan on trying to come to the usa for work
random trellis
do you plan on trying to come to the usa for work
i think i have to finish my studies first, and our college also provide us placements in companies like TCS, WIPRO
lilac idol
i think i have to finish my studies first, and our college also provide us place...
can you teach me some tricks other than whats taught on tryhackme
random trellis
can you teach me some tricks other than whats taught on tryhackme
@steep agate created a video on that
lilac idol
i mean other things
random trellis
i mean other things
other like what?
lilac idol
any tools or anything you use that i dont know about?
random trellis
any tools or anything you use that i dont know about?
π i use the same tools like others, burp, go buster, rustscan, fuzz, dir buster, ssh2john, hydra, nmap
fcrackzip
and linpease
random trellis
is there any tool you use to bypass captcha?
sorry i never did this so dont know about this
lilac idol
have you heard of redliner
random trellis
i think tryhackme has covered everything that a pentester needs to know
lilac idol
no
they havent
in my opinion
technology and firewalls are constantly being upgraded and advancing
random trellis
technology and firewalls are constantly being upgraded and advancing
yess, companies nowdays not using firewalls they are moving to cloud storages
i have listened alot about vulnhub, pentestlab i think i have to give try to that too
may be we will learn something new
lilac idol
tryhackme should have rooms on testing cloud
i just deleted pentest lab it didnt seem to work
but yeah vuln hub is good
im trying to make my own vulnerable linux machine with every privesc on it to practice
random trellis
tryhackme should have rooms on testing cloud
i got a mail long time ago from tryhackme where they asked every user that how can we improve ourself, i requested for cloud pentesting learning path
but never got room on that
lilac idol
yeah thats what i want too
because it seems a little outdated many of the things they teach
most of that stuff would have worked a lot 20 years ago
i need to know about the present
like cloud and bypassing captcha and things like that
random trellis
cloud pentesting's scope is getting higher day by day, even SANS and ec-council added it in their certifications
lilac idol
yeah im surprised they havent added any cloud rooms