HTB - Crafty
by paven - Saturday February 10, 2024 at 02:35 PM
#31
(Feb 11, 2024, 12:47 AM)chillywilly Wrote: for root look where youre dropped into when you get the foothold

thanks for the tip! Rooted! Heart Big Grin

This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Leeching | http://c66go4clkqodr7tdjfu76jztjs7w7d3fajdeypxn73v4ju3dt7g5yyyd.onion/Forum-Ban-Appeals if you feel this is incorrect.
Reply
#32
(Feb 11, 2024, 03:04 AM)0xfd9aac Wrote: root is really easy if you know what to look for or you have a lot of free time Big Grin

you're really fucking annoying, clown.
Reply
#33
(Feb 11, 2024, 06:11 AM)Axura Wrote: Can someone from the HTB just fix the machine. i knew it could be a nightmare for such multi-players box with poor server.

Apparently one game server cannot accept players more than 3 ppl. And after repeatedly requesting to reset the machine, you join the server, you got to rev shell, you captured the flag, and typing in HTB just showing error with wrong flag ...

FIX THE SERVER

Unfortunate side effect of the log4j method. By creating the revshell you essentially 'steal' the server process for your reverse shell. Meaning others cant utilize the server for their reverse shells, so then everyone goes to reset.

Seeing log4j somewhere other than tryhackme, and on a windows machine, is interesting. Lack of foresight from the creator for not considering the overflow though. Some paid methods for alternative single instances but that's a bad 'workaround'.
Reply
#34
done, thanks for the help so far.
Reply
#35
Can Someone help me the the minecraft client ?
I really stuck at this point, I've downloaded this client: https://github.com/HMCL-dev/HMCL
I can't use multiplayer, and I have to make an Xbox account and buy minecraft for it to work

This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Leeching | Contact us via https://breachforums.ai/contact if you feel this is incorrect.
Reply
#36
(Feb 11, 2024, 06:49 AM)TheGatekeeper Wrote: Can Someone help me the the minecraft client ?
I really stuck at this point, I've downloaded this client: https://github.com/HMCL-dev/HMCL
I can't use multiplayer, and I have to make an Xbox account and buy minecraft for it to work

You can utilize MC-CLI and it works well, just need dotnet 7.0 first before the MC-CLI install. (8.0 doesn't work after the initial install)
Reply
#37
Someone please share with me the poc.py coz I'm trying with jdk1.8.0_20 with powershell -enc for windows reverse shell.

But shell didn't happen.

Thanks.
Reply
#38
(Feb 11, 2024, 07:25 AM)GWTW Wrote: Someone please share with me the poc.py coz I'm trying with jdk1.8.0_20 with powershell -enc for windows reverse shell.

But shell didn't happen.

Thanks.

You just need to change the variable to "cmd.exe", not a full reverse shell payload
Reply
#39
https://github.com/ammaraskar/pyCraft will also work for sending minecraft msgs as long as you have other stuff set up
i automated to get the first foothold then a second powershell script to root it form the initial foothold.
Reply
#40
(Feb 11, 2024, 07:35 AM)chillywilly Wrote: https://github.com/ammaraskar/pyCraft will also work for sending minecraft msgs as long as you have other stuff set up
i automated to get the first foothold then a second powershell script to root it  form the initial foothold.

Any hints for root? Aside from looking in the directory we land in
Reply


Possibly Related Threads…
Thread Author Replies Views Last Post
  [FREE] CPTS 12 FLAGS pulsebreaker 72 2,164 2 minutes ago
Last Post: coolguyaroundyou
  [FREE] HackTheBox Academy - CAPE Path Study Techtom 43 4,214 50 minutes ago
Last Post: codexUltron
  [FREE] HackTheBox Academy - CBBH CDSA CPTS All Modules Flags Techtom 24 2,740 53 minutes ago
Last Post: codexUltron
  [FREE] HackTheBox Dante - complete writeup written by Tamarisk Tamarisk 603 92,361 8 hours ago
Last Post: 0xnany
  [FREE] 300+ Writeups PDF HackTheBox/HTB premium retired Tamarisk 374 93,325 8 hours ago
Last Post: 0xnany

Forum Jump:


 Users browsing this forum: 1 Guest(s)