koth-voice-chat

[slim surge]

10 mins

[slim surge]

https://tryhackme.com/games/koth/join/ec14a6339a342b41e87aa870

20 mins

[soft beacon]

Who wanna join a quick KotH challenge?

[wanton sandal]

me

[soft beacon]

Let's go

[slate jackal]

!docs verify

[proud frigate]

TryHackMe

Verify your TryHackMe Profile!

https://help.tryhackme.com/en/articles/6495858-discord

From TryHackMe with ❤!

[soft beacon]

GG to 4cid for the Panda challenge

If you're here, feel free to tell me how did you privesc'd the box

[ivory shore]

https://tryhackme.com/games/koth/join/76d3206dc80c4a68c60ef7af

[vapid storm]

anyone doing a koth right now?

[tired lark]

I just was

It was my first time, I didn't even know how to interact with the private IP until 30 minutes in

[tired lark]

https://tenor.com/view/judging-stare-bored-dont-you-dare-annoyed-gif-22904796

[night hemlock]

Anyone want to play?

[sinful nest]

https://tryhackme.com/games/koth/join/3293265f5d58fe7ab3572dda

[small hamlet]

What terminal are you using?

[sinful nest]

fish

https://github.com/xct/kali-clean

I customized a little the settings that xct uses

[small hamlet]

Thanks!

[sinful nest]

xD

[radiant quail]

Anyone wants to play?
https://tryhackme.com/games/koth/77761

I wanted to replay this machine, i will be glad if someone could join

[slim surge]

https://tryhackme.com/games/koth/join/fdc09accd9a66a795e7f81ef

[radiant quail]

I wanted to play Hackers machine, thanks for helping though

[brittle stirrup]

Gave +1 Rep to @slim surge

[slim surge]

want to host a private one ill join

[radiant quail]

Sure ,thanks~
https://tryhackme.com/games/koth/join/5f1a0a2be6e54cdf3e9437ce

[autumn schooner]

any

[slim surge]

https://tryhackme.com/games/koth/join/197e7d0111108cdc01f3cf54

[autumn schooner]

any leads ?

[slim surge]

there's a way in on 80

[autumn schooner]

okay

[radiant quail]

Is someone using autorecon or somethings else on the H1: Easy box?

It's so slow

[river basin]

Hello

[night hemlock]

https://tryhackme.com/games/koth/join/3732d7532264e228d751ec78

Looking for a game if anyone is interested

[night hemlock]

@slim surge gg locking down h1 medium

[slim surge]

gg

[void dust]

@slim surge dont beat us to bad 🤣

[slim surge]

ill make it fun

[void dust]

hope its a linux box cuz i dont know windows very well

[slim surge]

🤞 yea me either

[void dust]

can you join vc after so we can talk about the box when it is over

[slim surge]

i would but im bout to head to bed, gotta work in am

[void dust]

ok

GG

[compact pagoda]

https://tryhackme.com/games/koth/join/702aa9f807729ee130a2b02b

[radiant quail]

Bruh this dude played the whole day on almost every match

[radiant quail]

If anyone's pty got spammed by this Detrew guy, pls help report

[radiant quail]

I made a script to detect those players before joining matches,
if anyone is interested, please PM me and improve the tool together

[wooden garden]

Not too sure about the rules for koth, so I'll cc @neon river

[radiant quail]

thanks, i'll be glad to know

[brittle stirrup]

Gave +1 Rep to @wooden garden

[slim surge]

I don’t think spamming pty sessions would be against the rules to report a player I mean it’s basically the same as https://tryhackme.com/room/redisl33t you could always just use -T flag when connecting through ssh to prevent someone spamming your pts. Or connect to machine without ssh and just don’t stabilize your shell . We have a few tips and tricks to help maneuver in an unstablized shell and edit files using sed.

Feel free to dm if you want I can share some of those tricks with you

[radiant quail]

I see, thanks a lot for the info

[brittle stirrup]

Gave +1 Rep to @slim surge

[slim surge]

No problem

[sinful nest]

https://tenor.com/view/devil-coy-smile-evil-red-gif-24996668

[radiant quail]

that's a cool terminal

arch?

[sinful nest]

i3wm

[radiant quail]

cool thx

[night hemlock]

https://tryhackme.com/games/koth/join/6978ed09e754ac698d37f9e2

[compact pagoda]

Are you bravosec?

[radiant quail]

Hi

[compact pagoda]

Are you playing koth now?

[radiant quail]

yea

[compact pagoda]

how minutes left or just started

[compact pagoda]

@sinful nest did you clsoe all ports

[sinful nest]

?

I'm the one asking

you were the one who killed the machine lol @compact pagoda

[compact pagoda]

no

[sinful nest]

send me your terminal output

[compact pagoda]

I closed it

click reset

[sinful nest]

?????

lol

you break the machine and it's my fault

[compact pagoda]

I didn't break. I saw nyan cat so I closed my terminal

And then this error

[sinful nest]

10.2.3.10

this is your vpn ip ?

[compact pagoda]

yes

[sinful nest]

lol

is you 🤣

[compact pagoda]

?

What it say

[sinful nest]

right hahahaha, lol

[compact pagoda]

@sinful nest Are you on sftp

[sinful nest]

ah ?

no

btw @compact pagoda this box doens't have connect from external internet

[compact pagoda]

yeah I just encountered that prob

Where are you hiding lol

[sinful nest]

I'm not with hidden processes and not using rootkit 😄

?? @compact pagoda

[compact pagoda]

No, I seeing where you are by deleting files

[sinful nest]

I ? wtf 🤣

Last thing, don't blame me for the things you do like breaking the box in this game, that's not cool, own up to your mistakes 😉

[compact pagoda]

I swear I didn't do anything during mid game. I just deleted files at the last 2 minutes

I just saw the nyan cat, and closed my terminal

Also, @sinful nest do you ln -s /dev/null .bash_history

[sinful nest]

ya

why ?

[compact pagoda]

I was trying to see who enters directory using that. It works usualyl

[sinful nest]

ah ??

[compact pagoda]

Also were you on no tty?

[gilded sparrow]

What is this?

attack or defense/

[compact pagoda]

@sinful nest You are using rootkit

[sinful nest]

no

why ?

[compact pagoda]

systemd?

[sinful nest]

no

[compact pagoda]

I can't edit king.txt you are not using a loop I assume?

[sinful nest]

neither

[compact pagoda]

Something to do with this ```type=SERVICE_START msg=audit(1691375918.470:3819): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=kothh comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
< type=SERVICE_STOP msg=audit(1691375918.471:3820): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=kothh comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
< type=SERVICE_START msg=audit(1691375918.471:3821): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=kothh comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
< type=SERVICE_STOP msg=audit(1691375918.673:3822): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=kothh comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'
< type=SERVICE_START msg=audit(1691375923.720:3823): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=kothh comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
< type=SERVICE_STOP msg=audit(1691375923.721:3824): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=kothh comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
< type=SERVICE_START msg=audit(1691375923.721:3825): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=kothh comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
< type=SERVICE_STOP msg=audit(1691375923.922:3826): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=kothh comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=?

[sinful nest]

ah ?

wtf

[compact pagoda]

wrong?

[sinful nest]

i'm using this

destroy in koth

[compact pagoda]

Not this? Intercept Syscall Write from /root/king.txt.
This technique is very advanced using LKM ( Loadable Kernel Module) that is, at the kernel/ring0 level, me and F11snipe use it, basically if you try to put your nickname in king.txt, nothing will happen and the nickname of who is using the intercept syscall write will remain, as this file is being intercepted.

Also your ip? 10.14.39.200

[sinful nest]

ya

why ?

[compact pagoda]

Were you using the syscall write thing

[compact pagoda]

I saw ip from crontab

[sinful nest]

cool

[compact pagoda]

?

[restive kelp]

@vapid storm Enjoy your king time, im out 🤣

[vapid storm]

🤣 thanks

[brittle stirrup]

Gave +1 Rep to @restive kelp

[restive kelp]

Curious tho as im new to KOTH - so king time is what gives you points the most after flags?

[vapid storm]

i think yeah.. im new too 😄

[restive kelp]

And you disabled write access to the king.txt file even if im root? 😂

[vapid storm]

before the play this.. i did some osint about koth 🤣

@restive kelp

[restive kelp]

Got you ✌️

[vapid storm]

👍

[slim surge]

Probably a chattr lock.. google about chattr

[sinful nest]

https://tryhackme.com/games/koth/join/ad1fa1e62e6f584abf2b98ad - shrek match

[sinful nest]

https://tryhackme.com/games/koth/join/841b3fe9aefd140da0ae648c - food match

[restive kelp]

Yes did my research on the whole KOTH dynamic - thank you

[brittle stirrup]

Gave +1 Rep to @slim surge

[slim surge]

If you need some tips and tricks feel free to dm

[sinful nest]

https://tryhackme.com/games/koth/join/7313bb8dd1eb2268cf01a124 - tyler

[median jolt]

if someone want to join I'm here for some KOTH
https://tryhackme.com/games/koth/join/02b48410b6162e639b8308a0

[empty salmon]

https://tryhackme.com/games/koth/join/16269467e6fec27e3dc874b8

[night hemlock]

https://tryhackme.com/games/koth/join/d82e6c4cdc9fc1368921343b

jump on frens

[bronze seal]

https://tryhackme.com/games/koth/join/2b0149f30bd16fa611b9e653

[bronze seal]

https://tryhackme.com/games/koth/join/95c95e36a1e40252931749e0

[night hemlock]

https://tryhackme.com/games/koth/join/9d9ec66fa9b7735f681a24b6

[cloud creek]

@steel dirge .. aint it taking forever for the ftp bruteforcing?

[steel dirge]

no its anonymus login

[cloud creek]

yeah anonymous login initially, but for the user mcgrawford we need to bruteforce right?

[autumn schooner]

anyone ?

want to pplay ?

[untold quiver]

Yes Rage, if you free for now, we can join ?

[autumn schooner]

join

[untold quiver]

are you means KotH ?

[autumn schooner]

yep

game start in 1 min

20 sec

[untold quiver]

I am here

[autumn schooner]

username ?

[untold quiver]

ben.mert

[autumn schooner]

awesome !

[cloud creek]

where is the king.txt in "medium" machine?

[slim surge]

I believe it’s in c:\

[vapid storm]

whos in this game with me

[wicked beacon]

need to configure sound settings

[radiant quail]

@tall knoll https://tryhackme.com/games/koth/80128

@tall knoll 10.10.249.62

@tall knoll https://education.github.com/pack

[autumn schooner]

any !

[autumn schooner]

later

[slim surge]

@violet meteor

[acoustic dirge]

Done!

Done!

[empty salmon]

https://tryhackme.com/games/koth/join/052c7d6db9adeb8f529cc799

[vapid forge]

gg

[idle falcon]

does anyone tell me the right way to approach a koth challenge ?

[vapid storm]

uwu

[sonic stump]

Hey can you change your username please? We have a pretty strict no politics rule in this server

[frosty hedge]

Changed it for them. 🙂

[vapid storm]

ok

i can

[vapid storm]

hey, can you verify me? i cant talk in #koth

[sonic stump]

you can verify yourself

!docs verify

[proud frigate]

TryHackMe

Verify your TryHackMe Profile!

https://help.tryhackme.com/en/articles/6495858-discord

From TryHackMe with ❤!

[vapid storm]

im pretty dumb

i do not known how to read docs

:/

[sonic stump]

no worries, you got it 🙂 you're verified now

[sand path]

!docs verify

[proud frigate]

TryHackMe

Verify your TryHackMe Profile!

https://help.tryhackme.com/en/articles/6495858-discord

From TryHackMe with ❤!

[ivory shore]

23min
https://tryhackme.com/games/koth/join/05a6546f18ca08b571031bce

[vapid storm]

Hi :3

[untold quiver]

Hi

[vapid storm]

wanna play koth?

https://tryhackme.com/games/koth/join/bbc175556ec4c52fc5f7df4c

3 min

[untold quiver]

Not for now, but thanks for asking and have fun or enjoy.

[vapid storm]

ok uwu

[untold quiver]

Okey

[vapid storm]

Ohayo

[sinful nest]

https://tryhackme.com/games/koth/join/50e0adc7cb545f4f0b4ae0a8

[untold quiver]

Hola!

[pure yew]

can i join the general room ?

[untold quiver]

Yes, of course.

[pure yew]

the voice is locked

[untold quiver]

You need to do verify

[pure yew]

ok

[hot fern]

someone teach me how to play koth

[haughty merlin]

How to change my username on koth?

[hot fern]

thats even possible

?

[forest laurel]

You need to change your username on your account.

!email

[proud frigate]

TryHackMe

Contact us for support, teaching enquires and more!

[e-mail]

From TryHackMe with ❤!

[untold quiver]

Hey yall!

[slim surge]

Here’s some good videos to learn from https://m.youtube.com/watch?v=wIDdrY-opPU

[lime finch]

Hi all

[untold quiver]

Hi all!

[haughty merlin]

hi .

whois stdoropov ?

[nova sigil]

i like to see when people play koth its the best way to learn seeing others play. seeing how they approach things that a great way to learn

[winged bane]

Hii

[slim surge]

Check out #koth-voice-chat message

[shell lichen]

suggest me appropriate linux for pentest which won't crash every other week and which is stable os

[untold quiver]

Exactly, it is the Debian and Slackware

[slim surge]

Should be any Linux os all you need is the tools… or you could use something like blackarch, kali, parrot, etc…

[fringe geyser]

hello

[untold quiver]

Hello!

[pearl narwhal]

Hi

[ivory owl]

who's trevohack?

[untold quiver]

Hi!

[fringe geyser]

hey

anyone there

[untold quiver]

Hey!

[wanton sandal]

Me

[haughty merlin]

hi

[untold quiver]

Hi!

[haughty merlin]

hi all i broke my shell using while[ 1 ] loop how i can take it back?

[winged bane]

Yeses

[untold quiver]

I wonder this too!

[fringe geyser]

yo

ctf rn?

[vapid storm]

hi

[untold quiver]

Hi!

[vapid storm]

how are you?

[untold quiver]

Fine, you ?

[vapid storm]

fine thanks, what are you doing?

[brittle stirrup]

Gave +1 Rep to @untold quiver

[untold quiver]

Just thm path 🙂 you ?

[vapid storm]

chilling with a easy thm ctf

[untold quiver]

Yes, in same way. 🙂

[vapid storm]

yeah

[wanton sandal]

Hello

[untold quiver]

Hi!

[wanton sandal]

Hey, what’s your usernames on thm?

[untold quiver]

Hey, is same.

[humble herald]

for beginners https://tryhackme.com/games/koth/join/50bd32630317225ff667abeb

[wanton sandal]

wanna play koth

[celest basin]

Ya

[untold quiver]

No thanks, not right now.

[brittle stirrup]

Gave +1 Rep to @wanton sandal

[untold quiver]

Ya!

[proven notch]

somebody wants to play koth?

[untold quiver]

quite

[haughty merlin]

Hmm

[vapid storm]

hello

lesgo

[austere ice]

hello everyone here i am trying to educate people about patching the system vuln in KOTH game my network are not work well today so also my vpn work slowly thus why i take long time to get into the game sometimes i reset a machine twice. Sorry for that but my advise is that don't delete web folder go and correct the vuln code from that web files and fix it to do that is just like delete the website because of bugs that not true our goals is to learn how to fix that vuln not to shutdown server or delete the web folder thanks and sorry for everybody i bothered @austere ice

[untold quiver]

Okey

[untold quiver]

<

[iron needle]

Hi everyone~ There have person want to play KOTH after 7min

[untold quiver]

O

[barren marlin]

@ivory shore GG's you won off of 5 pts just realized i won. anyways ggs

[untold quiver]

ggs

[ivory owl]

somebody used iptables to block me lol

[untold quiver]

yes

[ivory owl]

@winter mauve This you? https://imgur.com/a/ex7RJa3, https://pastebin.com/Eaif4zzS

[winter mauve]

yeah lol im new to KOTH

ur pretty good bro

Good job

[ivory owl]

thx. keep up the good work. just don't screw up the box lol

[winter mauve]

Oh shit did I

[ivory owl]

kinda need /etc/passwd

[winter mauve]

Very true lol, I have no idea what to do, to patch vuln's

What chmod did u do to make king.txt xrwxxxxxxx

chmod 600?

[ivory owl]

i didn't chmod it. google chattr.

[wanton sandal]

aren't you the same person redirecting tcp traffic on port 9999 to your ip and port for king?

[ivory owl]

a misunderstanding of the rules on my part 😁 . I didn't prevent everyone else from accessing the box.

[vapid storm]

anyone down for some koth?

[haughty merlin]

Let's roll

[vapid storm]

XD

well do it in the morning for sure

or later in the afternoon if your still up for it

[vapid storm]

im free right now if you area ready

[slim surge]

https://tryhackme.com/games/koth/join/82bc3ba2cca4603598b7bbea

starts in 10 mins

[untold quiver]

Okey

[humble oak]

hi

[humble oak]

anyone in here?

https://tryhackme.com/games/koth/join/c1f90c6bef48e8b83ccd898a

start in 12 min

10 min

[untold quiver]

Okey

[humble oak]

hi

who can play koth now

[untold quiver]

Hi

[chrome topaz]

koth anyone?

[barren marlin]

KOTH any1?

[humble oak]

hi

[gleaming spruce]

hello

[digital whale]

@sick panther 😦

[sick panther]

@ivory shore what was ur pts i couldnt find it

[ivory shore]

https://tenor.com/b2eg8.gif

[ivory shore]

I usually avoid using any pts or stable shells 😉

[sick panther]

So u use …

I was going to demonstrate the trick u thought me last time nyancat

[sick panther]

socat

[sick panther]

@crimson notch

[crimson notch]

see this.

check your error.

btw im not root anymore.

all my processes were killed a while back.

[sick panther]

ooow

[crimson notch]

were you btwist ?

[sick panther]

yes

[crimson notch]

you are using netcat command wrong.

check that.

and you can't read /root/root.txt lol.

[sick panther]

no it was in the crontab

so it was going to be run by the root

[crimson notch]

fr ?

[sick panther]

what do u mean

4real

[crimson notch]

yes.

[sick panther]

is the host down

[vivid crane]

hi

[crimson notch]

were you asking me.
the box easy was up when i was there. after i lost shells i was gone.

[flint ginkgo]

Hey. WhatsUp Guys..

[sick panther]

Hi there

[haughty merlin]

Hi KoTH player…

[humble oak]

hi

[vapid storm]

Koth anyone?

[haughty merlin]

Play some learn some

[haughty merlin]

wow... windows box on koth is really goods

[grand sparrow]

wasup

[grand sparrow]

wtf

[digital whale]

@candid fable Did u make the txt file?

[candid fable]

yes 🙂 who else ?

[digital whale]

Idkk lol

This was my first windows machine

[candid fable]

GG

[digital whale]

GG man

[heady siren]

Somebody wanna play koth and vc?

[flint ginkgo]

@crimson notch how to posible this.
But I'm getting angry!

[crimson notch]

you'v just changed the pass of shifu. ig there are many other routes to hop in.

[flint ginkgo]

how to change medium machine password.

[vapid storm]

do u need a openvpn to participate in koth if so where do i get the key?

[untold quiver]

There is no a special vpn file for koth as far as i know, i guess the general vpn file for thm is enough.

[mossy tulip]

Someone is up for quick KOTH?

[haughty merlin]

nice one @ionic junco

are u want to tell me how you change permission of king.txt so i cannot write on it ?

look like added user king are you ?

[untold quiver]

Chattr +i / -i king.txt ? it is does / doesn't work for you ?

[haughty merlin]

Nice one ... file permission not changed, but it's my fault ... i write crontab to execute every minute but with wrong path 😅
* * * * * root echo "my username" > king.txt <== this should /root/king.txt

[untold quiver]

ок

[haughty merlin]

Hei @wanton sandal where you put the chattr ?

[wanton sandal]

i removed chattr

i use a custom binary

[haughty merlin]

nice to play with you ...

[wanton sandal]

gg

[haughty merlin]

i have no clue on privesc... can you tell me

i miss 2 flag

[wanton sandal]

dm

[sudden topaz]

Is it allowed to close the ssh port on a koth machine?

[violet meteor]

As long as there is another way onto the box

[sudden topaz]

the box is completely destroyed

I'm not even mad anymore

[topaz ridge]

@flint ginkgo Okay for delete the chattr, but not the wget binary 😡

[vapid storm]

hi master @topaz ridge

did u have any clue on how to use the rsa keys?

i tried like 20 variations of 'ssh -i' and even just 'ssh production' but it said 10.10.27.182 closed on port 22

[topaz ridge]

@vapid storm I don’t know, i was gone to eat. Do you want make a private game to test ?

[vapid storm]

uhh sure

u know my username?

[topaz ridge]

I send you a pm

[vapid storm]

yup

[wintry nest]

hi

[ivory owl]

what's up

[untold quiver]

.

[pale yarrow]

hi

[wild mist]

hi

I would like buy tryhackme premium I need a body for discount if there is someone who would like to buy pls text me.

[humble oak]

hi

[compact pagoda]

What are your guys most sophisticated tools you made or used in koth?

[humble oak]

hi

[rain cliff]

hi

how do voice chat to koth user playing with me ?

[shy bough]

you cant on the website, but you can on discord

[rain cliff]

Thank you for your reply!
Which channel should I use?

[shy bough]

you can use the KOTH vc

[rain cliff]

KOTH channel is locked.
Why is this?

[shy bough]

have you enabled it in the id:customize @rain cliff ?

[forest laurel]

You need to be verified

/DOCS verify

[tough hawk]

Discord: How do I verify my TryHackMe account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Apr 6, 2024, 11:08 AM

[rain cliff]

@shy bough @forest laurel
Thanks! I verified !!

[brittle stirrup]

Gave +1 Rep to @shy bough (current: #2050 - 1)

[barren marlin]

@vestal garnet

Are you the one in my room rn?

[frozen wing]

How do I talk with my people in KOTH?

[untold quiver]

You need to be verified. /DOCS verify.

[tough hawk]

Discord: How do I verify my TryHackMe account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Apr 25, 2024, 3:46 PM

[tough hawk]

@gusty pebble

Student Discount

Article Link

https://help.tryhackme.com/en/articles/6494960-student-discount

Apr 28, 2024, 11:44 AM

[alpine pagoda]

damn u can go support

[glacial laurel]

@alpine pagoda GG D:

[alpine pagoda]

Gg

[glacial laurel]

@sinful nest Did You Manage To Get Flags? 👀

[sinful nest]

yeah why?

[glacial laurel]

You Didnt Submit? It Showed 0

[sinful nest]

yes, for me it is not necessary to submit flag, when you are in king

[glacial laurel]

Wait, If Someone Becomes King You Can Become King By Using Stashed Flags?

[sinful nest]

yeah you can win, but this only works when you have more points than the person who has king, so you score the flags****

[glacial laurel]

*takes notes*

[slim surge]

no... you can still get points using flags if someone else is king tho.

[modest magnet]

Ah man... think i was too slow trying to get SSH

[vapid storm]

who's down for koth?

[spring prism]

I play koth for the first time in months and someone decides to disable ssh smh

[coral holly]

lol

[untold quiver]

lol

[inner holly]

@dr0p

What a cheater

resetting machine since you where kicked out of the machine

@staff

[tough hawk]

KOTH: Creating a game

Article Link

https://help.tryhackme.com/en/articles/6495991-koth-creating-a-game

May 30, 2024, 9:36 AM

[forest laurel]

You'll need to email support 🙂

[tough hawk]

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · May 30, 2024, 9:37 AM

[inner holly]

never do anything

gg zzzzzz super dirty game

resets should be deleted

[timid leaf]

Played first KOTH ever and lost due to some minutes. Got root only after the challenge was over. Manual enumeration took time, linpeas was so fast. Bad luck (._.). Any suggestions to a new KOTH player?

[sinful nest]

Hey, here you will find several tips and tricks for koth, both for defense and attack: https://github.com/MatheuZSecurity/Koth-TryHackMe-Tricks

[timid leaf]

Thank you

[brittle stirrup]

Gave +1 Rep to @sinful nest (current: #133 - 51)

[tough hawk]

TryHackMe

Ollie

Ollie Unix Montgomery - Rest in Peace, 5th of January, 2023

[clever panther]

How can I join voice? :(

[brittle wasp]

sorry I have no mic or headset

[mossy tulip]

You need to verify yourself first

[tough hawk]

Discord: How do I verify my TryHackMe account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Jun 23, 2024, 7:06 AM

[acoustic dirge]

There are no URLs in that message.

[sharp crescent]

testing

[iron lion]

testing response

[rough gate]

true

[gilded breach]

@queen pasture Good game, definitely gave you hard time. 😄

🚀

[gilded breach]

@sinful nest NOOO

😄 , Don't wanna play against you.

[slim surge]

What... 0day on KOTH 🥳 ...

Would've been a good game to play... 😩 I missed it.. lol

[sinful nest]

This is priv match

[gilded breach]

Oh yea @slim surge, it was a priv match.

[slim surge]

Yea I figured it was, only see 0day and Simon. I could've still jumped in tho 😞... Maybe next time 😂

[gilded breach]

@final acorn It's me. 😉

I don't play that much, let's see.

[final acorn]

Yahh you can call me when you play

[gilded breach]

Sure, It was fun playing with you.

[final acorn]

Ohh really 👽

[gilded breach]

😄

[final acorn]

You wanna play a private koth

@gilded breach

[gilded breach]

fireworks?

[final acorn]

Let's see ,

[gilded breach]

👀

Sure.

[final acorn]

I will send you a join link here

[gilded breach]

let me finish the game.

[gilded breach]

wait for 10 mins I guess.

[final acorn]

5 minutes

[gilded breach]

@final acorn Make a fireworks private one.

[queen pasture]

❤️

[tough hawk]

TryHackMe

Ollie

Ollie Unix Montgomery - Rest in Peace, 5th of January, 2023

[gilded breach]

yea win it 🎉

[final acorn]

Bro i was so tired, can we play the next day please

[gilded breach]

why not, I'm not good at it. 😉 (don't root it).

[final acorn]

Ohh okk

[alpine pagoda]

@gilded breach i challenge you to a koth match

[gilded breach]

why not akhi, you still gonna win.

[alpine pagoda]

Maybe maybe we wont know xD

[gilded breach]

https://tenor.com/view/cod-ghost-call-of-duty-love-mw-gif-654604288863989615

[rough gate]

;=;

[vapid storm]

koth anyone?

dm if anyone wanna play

[hazy shoal]

im waiting to play my second KOTH... EVER. Like, im new to hacking and all and have practiced a bit and i did my first KOTH yesterday, and i looked at the recent matches today and the winner in all of them was Ch1. I join a match, im waiting for it to start, guess whoes there. Just me and Ch1. Ch1 seems proffessional, i am new o hacking...

I wonder who will win???? (Definitely not me 😅 )

[hazy shoal]

(I bailed out, they patched everything too fast

[wanton pilot]

i just did koth today and ch1 just pwned the root in 1 min i think he is using autopwn script ...

[hazy shoal]

Yeah Idk but he’s top 6% he seems pretty good at it. Cheating in the game, but at least it would be good in the real world penetration tests

[wanton pilot]

im in top 2% near of the top 1% and just to do a nmap scan on the machine take like 5 min for me, he don't need to enum the machine to pwn it x) or maybe he know all of the koth machine

[hazy shoal]

Idk then, I’m quite new to it

[wanton pilot]

^^

[hazy shoal]

What do you do then? Nmap scan then what? I use tmux, and in split screen do nmap and gobuster and then while that’s going look at the webpage and use inspect element and then go off of what directories are shown in gobuster and ports open in nmap

[wanton pilot]

after nmap if i see http i use dirsearch to enum dir , ffuf to enum subdomain , if there is login page default credential , sqli // if i see some service like ssh , sql i try some default credential like root:root , if i see a CMS on a webpage i search the version and if there is some CVE on it

[hazy shoal]

Ah ok, what’s sqli?

[wanton pilot]

SQL injection

[hazy shoal]

Ohh ok

I’ve never understood SQL injection, could you explain it briefly to me?

[wanton pilot]

when you send the request on a webpage the server will do a SQL request like
Select user from users_table where users_table.user = $USER and users_table.password = $PASS

in sql the comment is --

so you will put in login this ' OR 1=1 -- -

so the request will be like that :

Select user from users_table where User = '' OR 1=1 -- - ' = users_table.user and users_table.password = $PASS

• = users_table.user and $PASS=users_table.password will be in comment

so the requesti will be always true and you will get the admin sessions

[hazy shoal]

Ohhhhhh

That makes sense

I’ll have to focus on learning a bit of that then.

[wanton pilot]

you can do the complete begginer its a great path to learn the basics !

[hazy shoal]

(I used to do a bit of programming in python, only basic stuff tho a few years ago so I can understand that relatively easily) the password check bit gets commented out so no password is required

[wanton pilot]

y that the idea

[hazy shoal]

Ah ok I’ll look into it, thanks for the help! 😁👍

[brittle stirrup]

Gave +1 Rep to @wanton pilot (current: #2182 - 1)

[hazy shoal]

Pretty smart tbh, can’t get around the password, just disable it

[wanton pilot]

he just pwned the machine in 1 min x)

[hazy shoal]

Ohhh dang

Should probably report him.

I literally just stopped trying 20 mins into my match cus nothing worked as he had patched everything

[forest laurel]

You do realise that someo of the machines are pre-made images.

So if it's an older machine, they were already have auto-pwn stuff.

[hazy shoal]

No, I didn’t realise, as I said before, I’m relatively new to this all

[hazy shoal]

Yes but surely they’re not allowed to do that?

[wanton pilot]

Y is not allowed

[hazy shoal]

@wanton pilot do you want to do a KOTH with me sometime? It could be today, tonorrow, the nexct day. Just whenever. Priv message me whenever you want to and we will do one if I am available. (Remember im new to hacking lol and i want to do KOTH as i found it fun - i have only ever done 1 match - and think it will be great for me to learn.) im also doing old KOTH rooms on tryhackme

[wanton pilot]

Yes if you want !

[grand sparrow]

😂 i played 400 + games just im 9 level and i beat your a** doesnt mean i cheat level dont do anything in koth its experience

i was playing koth since i was level 1 which is almost one year ago and you just started i have keys for most machines and some machines just need a curl cmd if you dont know your way around a machine or those other noobs dont doest mean you accuse me of stuff

[grand sparrow]

i never patch stuff no one can take king any way so i dont patch

[wanton pilot]

I didn't ask you to justify yourself, but 59 min of root on a game of koth means that you legit rooted the machine in less than 1 min.

[grand sparrow]

you guys should talk in the main koth channel so people can see your messages and i can see them too

[wanton pilot]

It may look suspicious, but if it's legit, well done!

[grand sparrow]

yeah i do that for most machines i save keys and i know easier ways on most machines

[grand sparrow]

thanks

[brittle stirrup]

Gave +1 Rep to @wanton pilot (current: #1451 - 2)

[grand sparrow]

you just need to save keys and experience with the machines

[wanton pilot]

on the machines that i have played the root was easy just a cmd and the user was juste in sql database

[grand sparrow]

what machine did we play?

[wanton pilot]

y

idk the name

food or smthg like that

[grand sparrow]

yeah food you littraly need one curl cmd to get a foothold

[wanton pilot]

y

for me it was juste sql database was accessible with root:root and there was a credential

and the root was only 1 cmd or smthg like that

[grand sparrow]

yeah you get ramen i know ramen noodles is the best is also the pass

[wanton pilot]

y

[grand sparrow]

there is also an http port that have an image in that image there is creds hidden for pasta

the httpport just serves the image and you use binwalk on it to get the hidden data

i looked at my notes its port 16109 idk if that changes

[wanton pilot]

ok your just a big tryharder x) sry i though your cheating

[grand sparrow]

and there is a hidden api that let you execute stuff as bread with one curl cmd which is what i used 👍

[wanton pilot]

okok

[grand sparrow]

i saw this messages after alot of time not a lot of people talk here we have more discussions in the koth channel
https://discord.com/channels/521382216299839518/695343809726513292

[wanton pilot]

okok

[grand sparrow]

use rustscan instead

[grand sparrow]

ffuf is the very fast you can also use it to enum dirs

[wanton pilot]

i just discovered threader 3000 like 2 days ago is very fast to scan port too 🙂

[hazy shoal]

Yeah I say the same, I was never accusing you @grand sparrow, just simply pointing out how it was suspicious, but as @wanton pilot says, if you didn’t cheat, then well done, that is some skill right there

[hazy shoal]

In food? I tried that it never worked for me on the food box…

[grand sparrow]

mysql -h ip -u root -p then type root

[hazy shoal]

Dam, can you tell me?

[hazy shoal]

I always did that. Ah well must have had a typo or something. I’ll try again soon

What’s the curl command to get the foothold

[grand sparrow]

i will give you a hint its port 15065

[hazy shoal]

Alright thx

[grand sparrow]

use ffuf to get the the hidden dir then explore there to find the hidden api

[hazy shoal]

What’s ffuf? Is it like go buster?

[grand sparrow]

yeah but ffuf is a lot faster

[hazy shoal]

And rusts can I’ve heard of but never used

[hazy shoal]

Ok I’ll use that from now on

Guys I was practicing on the food koth room from the old rotations, is it the same as the koth room that’s in rotation right now?

[grand sparrow]

yes

you can use foodroom to test on it

https://tryhackme.com/r/room/kothfoodctf

[hazy shoal]

Ahh ok. I’ll practice on that then so at least I’ll have 1 box that I know I can beat

[hazy shoal]

Yes that’s the one

I’ve tried it but never got into the MySQL or anything, only did an nano

Nmap not nano

What’s the MySQL to get in and see the users that are like ramen and stuff

[grand sparrow]

for mysql the username is root and the pass is root
just do mysql -h ip -u root -p then type the pass which is root

[hazy shoal]

I could have sworn I tried that

Oh well I’ll message here in a bit when I try it and say if that worked or not

[grand sparrow]

or you can go with the approach of the img and get pasta creds
i

[hazy shoal]

You can do that? What image?

[grand sparrow]

i think i remember you you played with me yesterday and you kept resetting cuz you thought i was patching but i didnt do it

[grand sparrow]

img on port 16109 do curl ip:16109 --output img.jpg

[hazy shoal]

I promise I have never clicked the reset button, although in the intermission I did keep leaving and then joining again hoping it would be a different match without you

[hazy shoal]

Ok, what does the -O do?

[grand sparrow]

maybe its not you then

[hazy shoal]

Yeah I’ve NEVER clicked the button to reset the box

[grand sparrow]

i meant --output curl doesnt save the response by default so you need to explicitly save it to some file
then use binwalk to get the creds

[hazy shoal]

Ahh pls

Ok not please lol

Autocorrect

Il message here in a bit saying if any of this helped, which I think it will. Thanks for the help, sorry it seemed I thought you were cheating, I was just saying it seemed a bit suspicious. You’re very skilled.

[hazy shoal]

ok. Im loading up the food koth room right now to try some of the stuff you told me

the room is ready, machine is strated, but im installing the stuff like rust and ffuf to try out. Ill add more time if i need. Im only doing it to try this all out

[hazy shoal]

never got around to even trying the room as rust wont install

how do i install rust? also im busy now so i wont be able to do it anyways until later

[grand sparrow]

install rustscan not rust for me it was just sudo apt update && apt install rustscan if this dont work and you have debian you download the latest .deb package from the the repo only and install it with dpkg -i packagename

[hazy shoal]

Yeah but the dpkg things isn’t working

Gives an error

[hazy shoal]

I’ll try the first command but when I try the .deb file with dpkg -i it doesn’t work

[hazy shoal]

when i do the first command it throws this error:

Error: The repository 'http://ftp.debian.org/debian stretch Release' does not have a Release file.
Notice: Updating from such a repository can't be done securely, and is therefore disabled by default.
Notice: See apt-secure(8) manpage for repository creation and user configuration details.

[hazy shoal]

also how do you make the command in the box there? its in a box in a way

sudo apt install rustscan
Error: Unable to locate package rustscan

[grand sparrow]

sorry. i was a sleeping let me send you the github repo

https://github.com/RustScan/RustScan/releases

get the debian package from there and install it

[hazy shoal]

Yeah I have done that but how do I install the package? I’ve downloaded the .deb file from there already but when I do | sudo dpkg -i rustfile.deb |

[hazy shoal]

When I do that command it throws the error.

Not the error in the message I just replied to from myself, but it throws an error

[grand sparrow]

what error does it say?

[radiant quail]

dpkg -i ./rustfile.deb

or dpkg -i <full_path_to_the_file>

otherwise it will search rustfile.deb from online repo list

[steady torrent]

GAHHHHHH

[hazy shoal]

Thank god your a life saver (o haven’t tried it yet, but that must have been what I was doing wrong, not doing the ./ )

[brittle stirrup]

Gave +1 Rep to @radiant quail (current: #759 - 5)

[hazy shoal]

Makes sense tbh

[hazy shoal]

Guys i got it working turns out mysystem runs arm64 not amd64 so the dpkg with t he .deb file thing

that didnt work so instead i got it working by asking chatgpt and it said to try the docker method and ave me the commands to do and it finally works everywhere. Before i got it to work but you had to go to the directory

[hasty plank]

it might affect the performance since docker is probably emulating x86 so what you could do is build rustcan from sources and this way you dont need docker

[hazy shoal]

ah well, it’s the only way that worked for me

[runic haven]

why is ch1 in every koth that i ever join?

[plush kraken]

https://tryhackme.com/games/koth/join/c756f101f884ce01c9ff7c47

anyone wanna join koth

starting in 8mins

@brazen hull

[upbeat lark]

what is koth ?

[tough hawk]

KOTH: Creating a game

Article Link

https://help.tryhackme.com/en/articles/6495991-koth-creating-a-game

Oct 14, 2024, 8:55 AM

[oak nimbus]

osint 🥶🥶

[loud socket]

Is there is a king of the hill easy mode

[sharp crescent]

Why isn’t it giving us the target IP?

[sharp crescent]

Nicely done Dompriv

I’ll get you one day

[tall rock]

How can i get in the vc?

[tough hawk]

How to Verify as a Student Without a Student Email

Article Link

https://help.tryhackme.com/en/articles/10617468-how-to-verify-as-a-student-without-a-student-email

Apr 4, 2025, 8:51 PM

Discord: How Do I Verify My TryHackMe Account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Apr 4, 2025, 8:51 PM

[scenic shoal]

you're in my game rn right? do you see an ip?

[solid lava]

no i dont

i was going to play but i left

sorry lad

[scenic shoal]

yeah its taking a bit longer than usual i might just do my own

[solid lava]

refresh the page maybe?

it never shows for me lol

[scenic shoal]

i've been, but its stuck on "scheduled"

I had this issue before with koth, even starting my own

[solid lava]

yeah same

[grand sparrow]

who uses this room 😂 dont we have another one for koth

[forest laurel]

This is for the voice channel...

[runic haven]

king of the hill

[winter gazelle]

@glad bramble 👋🏻

lets have a nice game 😎

[winter gazelle]

@wanton sandal is this you in the KotH game? 😅

[wanton sandal]

which?

hackers box?

[winter gazelle]

yes Hackers -- 132024

@wanton sandal we were in the same game couple of times now you always destroy me 🤣

[wanton sandal]

hehe gg

[wanton sandal]

ah yeah i played tht

[winter gazelle]

how did you get in bro? 😅
brute forcing the weak password?

I tried but my hydra skills are not that good so far 🫣

[wanton sandal]

i got in via the web vuln, n yes bruteforcing but i dont use hydra

[winter gazelle]

Okay 👌🏻. gg man

i still have so much to learn.. 😅

[wanton sandal]

gg, good luck

[glad bramble]

thanks friend

[brittle stirrup]

Gave +1 Rep to @winter gazelle (current: #2104 - 2)

[glad bramble]

@winter gazelle yo can u reset the machine

[winter gazelle]

You are the next one i can't beat 😅

[winter gazelle]

All good it just took little longer to start 😄

@glad bramble my skills are not enough to get root on this machine give me a hint how you got in 😅

[winter gazelle]

I did already

[glad bramble]

use exploit/windows/smb/ms17_010_psexec

it's so easy

[winter gazelle]

I started 1 month ago 😅 i am still learning

[winter gazelle]

www.tryhackme.com/games/koth132079 someone want to join?

[glad bramble]

try more everytime friend

[winter gazelle]

🫡

[sage siren]

Tenho Los Bro com tacos troco por uma lá grande

[winter gazelle]

@glad bramble did you close ssh?

Or was there never a chance to connect via ssh? 🧐

Oh my bad forgott to chance from the standart port to the actual one 😅

[winter gazelle]

@misty wharf gg

[misty wharf]

Suuup brooo

Gg

[misty wharf]

@winter gazelle game?

[winter gazelle]

Yeah lets go

[misty wharf]

https://tenor.com/view/spongebob-wipe-gif-16574265568803907770

[misty wharf]

huh??

ohh HAHA

it wasn't me

[winter gazelle]

I don't know what happend there

Is i was ssh in to the machine it got weard

[misty wharf]

it wassnt me but I know how it work haha

[winter gazelle]

What was happening?

[misty wharf]

login in ssh again then use -T flag haha

[winter gazelle]

What you mean?

[misty wharf]

you can hide your tty using -T

login again in ssh then add -T

[winter gazelle]

That shit scared the shit out of me

[winter gazelle]

So you say someone saw my ssh login?

[misty wharf]

when you type w or who, you'll see users

and those /dev/pts are users

[winter gazelle]

It only was in the ssh seasion so i should be save lol 😅 but scary

[misty wharf]

you'll learn that later but now try to learn how to hide haha

[winter gazelle]

I only 2 months in 😅

[winter gazelle]

I have to learn a lot more then that how i saw it 😂

[winter gazelle]

So yoz say if i had use -t by login into ssh that would have not happend right? 😅

[misty wharf]

the -T yeah but I dunno what other players do if they can still throw some troll on you even if you use -T

[winter gazelle]

Ok

[wanton sandal]

u can still find the pid using ps auxf n kill the shell

[winter gazelle]

Bro are you hunting me? 😂😂

[ivory shore]

https://tenor.com/tpRD9cv3c3Q.gif

[winter gazelle]

https://tenor.com/view/hacker-typing-hacking-computer-codes-gif-17417874

[covert dawn]

!koth

[tight ibex]

I cant access machine i am connected to the VPN

Why?

[lapis drum]

https://www.youtube.com/watch?v=lFSDVgHmWrk

[tight ibex]

Am i only the one who cant connect to the KOTH machine?

I am connected to my Vpn

[tiny glen]

The same here. Connected successfully to my VPN file config but ping target machine is timing out.

[winter gazelle]

https://tenor.com/view/south-park-eric-gamer-energy-drink-drinking-gif-12367733832566791838

[winter gazelle]

contact the tryhackme support

[winter gazelle]

contact the tryhackme support maybe if enough people report they actually start to do something

[tropic mauve]

I thought I was the only one

[tropic mauve]

I should do that too

@winter gazelle you're killing it bro🔥🔥

[winter gazelle]

haha thank you bro 🫡

[brittle stirrup]

Gave +1 Rep to @tropic mauve (current: #3535 - 1)

[winter gazelle]

https://giphy.com/gifs/skeleton-im-dead-VN3dGsdlp9nCPUfe8y

[winter gazelle]

https://tryhackme.com/games/koth/join/a9a735f743a7ea0b71d5bee1

[unique raven]

https://tryhackme.com/games/koth/join/5f3eb6302ae7ab05d281fa03

[winter gazelle]

what happend ?

[winter gazelle]

https://www.youtube.com/playlist?list=PLlPnd5hevo1VsuGolNQraZtqZnGm_EUnI

[empty dragon]

first

jk @neon river was first

[turbid epoch]

🤔

[cyan copper]

[neon river]

jk @neon river was first
@empty dragon

[stoic harness]

hacked

[violet meteor]

wwhoa

How did I not notice this until now

[floral jackal]

Man, you lot took forever to notice this new chat

[violet meteor]

I'll be honest, I subconsciously clicked

[unkempt bear]

anyone playing koth

[twin crest]

https://tryhackme.com/games/koth/join/c979f3f846ad235d35b96c03

[frigid quarry]

what is this

two vc chat.

[potent mauve]

now more trashtalking 🙂

[neon river]

what is this
one more channel to ghost ping you

[arctic wharf]

boooo

[frigid quarry]

or the opposite?

[neon river]

You can't ping me if i leave the server

[undone gorge]

Can I join stream?

Dunno if it’s private or not

Watch*

Oof

[novel marten]

Yoh

[iron hull]

Good afternoon

0x9 lvl I'm not sure if your trolling

oh its krypto

make sure you are doing the download ON your attack machine

headphone charging right now. gimme bout 3 more mins

[iron hull]

You guys are still trying to connect

[harsh wave]

https://tryhackme.com/games/koth/join/7abcd4a8d2cab8edb10b859a

[lost pine]

https://tryhackme.com/games/koth/join/40995da13453a68e886d6c82

[lost pine]

https://tryhackme.com/games/koth/join/48412158cfd5c258843588f8

[lost pine]

https://tryhackme.com/games/koth/join/722100474b24779b7bddfa24

ok

no ddos pls

HAHAH

[lost pine]

https://tryhackme.com/games/koth/join/31ffeaf71c895ac7b065d2b4

[unkempt bear]

anyone up for koth

[fluid oxide]

https://tryhackme.com/games/koth/join/a31fa13df97f534879ccb1c5

lets give it a try

is that u sunkennunu

did u join

[peak gorge]

ye

[fluid oxide]

wait after the timer it will give us a ip

yeah we havce to wait

https://tenor.com/view/mr-bean-checking-time-waiting-gif-11570520

k

fff i know this box

its easy only\

yes it is

just use basic ohk

yeah the box is up now

[warm fossil]

umm

is it up ??

[peak gorge]

ye it is

[fluid oxide]

just the basics nmap and msf

aynone knows how `to edit files in windows

goddamit i lost shelll

did u scan for scripts

yes

--script vuln

hmm

scan for all ports

for scripts

this is not good they should have given another box f

no i did it before thats why

[crimson ingot]

aynone knows how `to edit files in windows
@fluid oxide Windows doesn't do CLI editing in the same way that Linux does. Copy the files up, or use echo

If you're lucky you get a modified shell. cmder, for example, will let you use vim

[fluid oxide]

yeah then i used meterpreter to do that

in my first koth i was having just the nmap scan nthg else lol

i dont know wt to do next afte nmap scan

ig u got some vulns

[iron hull]

type == echo

[fluid oxide]

lol how many joined here

[iron hull]

copy con == cat >

[fluid oxide]

i dint change anything in box

[warm fossil]

Have mercy on us

[fluid oxide]

search for that vuln in metasploit

[warm fossil]

eternal blue exploit

ya

it is eternal

[fluid oxide]

yeah m17 and eternal blue are same

[upper fog]

ehem, Don't spoil the boxes, (I keep repeating this 🤷‍♂️ )

Let others try, it's more fun that way. :)

[warm fossil]

look for ms17

[iron hull]

@fluid oxide Never accused you of changing it, i said it COULD be patched, ialso said that EB is flakey, and sometimes even if you do it right, it wont work

[fluid oxide]

bruh i am not that good maybe i just entered the box and dont know how to patch it
i am searching for patch it actailly

[warm fossil]

bois iam in

[fluid oxide]

godddam howmany people here

i dint change any flags

or passwords

crap

juice do u know offline tv

noice!!!!!!!!!!!

ig ur thm username

[peak gorge]

^^

[fluid oxide]

juice u need to keep the THM username in king.txt

not ur dc name

u got this booi

does anyone know how to patch this vuln

[peak gorge]

gg

[warm fossil]

WOOO

[fluid oxide]

hmm

[warm fossil]

GG

[fluid oxide]

WP

[peak gorge]

was fun

[warm fossil]

i killed shells

[peak gorge]

oh ye u killed mine

[fluid oxide]

yeah he actaully kept the wrong name in king.txt

[warm fossil]

wo

@thick socket are you creating room

[peak gorge]

https://tryhackme.com/games/koth/join/f50f2271d79326214daf10fb

[warm fossil]

Again

[peak gorge]

?

ye ^^

[fluid oxide]

hmm once i playd with this guys @empty canopy he was the king only after 5mins lol

[peak gorge]

xd

[empty canopy]

@fluid oxide ohh i remember

[fluid oxide]

hmm yeah

[empty canopy]

@fluid oxide but this time im pretty busy i dont think i will be able to play neatly

[fluid oxide]

glhf

[peak gorge]

nice

[fluid oxide]

actaully i was also peeking that upload thing anf lfi

but cant find the file where it uploaded

[fluid oxide]

there are so many distractions in this box

wtf

bro juice i think ur got shell

bro i am stuck in this /bin file

lol

yes

bro same sitaution stuck in /bin

and where the hell are files being uploaded

did someone closed ssh

oh crap

lol somone is killing shells iguess

[fluid oxide]

f this bin

[dreamy jetty]

that sneaky laugh tho

whoever needs flags

dm me

[peak gorge]

xd

[dreamy jetty]

selling at a low price

black friday occasion

@thick socket you know whom to dm

@peak gorge change the payload

[fluid oxide]

wait how did u gethat shgell

[peak gorge]

python3 -c 'import pty; pty.spawn("/bin/bash")'

[fluid oxide]

ohh shit i was using python2

but it doesnt work

@empty canopy how did u get that shell from nostromo/

[empty canopy]

nope

[fluid oxide]

i dont have mic

thats the problem

[dreamy jetty]

@charred patrol taking notes

xD

[charred patrol]

lol why would i

[dreamy jetty]

joking 😄

[charred patrol]

i would just hook into the kernel and make the processes hidden by default

[dreamy jetty]

can you speak a word tho?

I've never heard your voice xD

[charred patrol]

i don't really have anything to say rn

[dreamy jetty]

say hello 😄

[charred patrol]

[dreamy jetty]

[cunning kestrel]

.

[neon river]

.

someone deleted their dot

[cunning kestrel]

:/

lame

[vapid storm]

lol

[vapid storm]

whats up

[stark seal]

@vapid storm hi

[vapid storm]

Hey man!

[stark seal]

what had you asked?

@vapid storm

[vapid storm]

https://tryhackme.com/games/koth/join/af02247d7e6ffcc2c6ee2f91

@stark seal

[warm fossil]

run vuln script

@vapid storm run vuln script

[vapid storm]

What is the encryption you reckon?

For the key?

[stark seal]

@vapid storm it is much simpler than all that you are doing

[vapid storm]

Is SSH key patched?

[stark seal]

no

@vapid storm there is a place for command injection

@vapid storm run gobuster

[vapid storm]

On videogames

?

[stark seal]

wordlist big.txt

@vapid storm http://10.10.39.138/_styles/?luck=id

there is also another more complicated way to get shell. The ssh shell

port 3333

@vapid storm

[vapid storm]

Thanks.

[empty canopy]

lol is that complicated

[stark seal]

is a hidden file in base64

@vapid storm reverse shell in python

didn't need the burp suite

good game

yeah

[empty timber]

spooky knowing that I'm being streamed

[sacred vector]

https://tryhackme.com/games/koth/join/4217c94598d4f6e2e9e38a7f

starts in 15 mins

[vapid storm]

;!

!

[upper fog]

@unique gate

hop in here

[neon river]

whaa-

what are you doing behind my back??

@neat night

wait wrong holmes

@upper fog

[upper fog]

LMAO

planning just for fun koth

[neon river]

What is a fun koth?? 👀

i play winning koth

[upper fog]

me too

but it's weekend!

the week was hectic af

finally some chill

[neon river]

you still have lots of winnings pending, remember? 😛