[hackwell]

Can anyone please advice where can I find vault token? checked all source can not see it.

have a look at all the tar.gz versions. one has a longer .bashrc file

[TuuuDs]

What happens when you change the endpoint?

mc alias set miniobreachuser http://prd23-s3-backend.skyfall.htb 5GrE1B2YGGyZzNHZaIww GkpjkmiVmpFuL2d3oRx0

[hackwell]

can someone help  i put in mc ?
iam trying  this but does not work
┌──(kali㉿kali)-[~]
└─$ mc alias set myminio http://demo.skyfall.htb  5GrE1B2YGGyZzNHZaIww GkpjkmiVmpFuL2d3oRx0 
Added `myminio` successfully.
                                                                                                                                                           
┌──(kali㉿kali)-[~]
└─$ mc admin info myminion                                                                                           
mc: <ERROR> Unable to initialize admin connection. No valid configuration found for 'myminion' host alias.

you're hitting the wrong endpoint. it would be http://prd23-s3-backend.skyfall.htb. That's where minio lives
plus you have a typo in your alias

[TuuuDs]

Did you add "prd23-s3-backend.skyfall.htb" to your hosts file ?

[hackwell]

How do I connect to the vault via ssh?

I have the token and the address but I've been stuck for a while now as I don't have a username and password to connect with "VAULT LOGIN".

this should help
https://developer.hashicorp.com/vault/do...-passwords

[al3xis]

Even if i have address and token every command returns 403 unauthorized, the only one that works is ./vault status what can i do?

[peRd1]

As soon as I access via ssh, I get kicked out, any clue how I can fix it?

(nobody@10.10.11.254) Password:
Welcome to Ubuntu 22.04.3 LTS (GNU/Linux 5.15.0-92-generic x86_64)

* Documentation:  https://help.ubuntu.com
* Management:    https://landscape.canonical.com
* Support:        https://ubuntu.com/pro

This system has been minimized by removing packages and content that are
not required on a system that users do not log into.

To restore this content, you can run the 'unminimize' command.
Failed to connect to https://changelogs.ubuntu.com/meta-release-lts. Check your Internet connection or proxy settings


The programs included with the Ubuntu system are free software;
the exact distribution terms for each program are described in the
individual files in /usr/share/doc/*/copyright.

Ubuntu comes with ABSOLUTELY NO WARRANTY, to the extent permitted by
applicable law.


The programs included with the Ubuntu system are free software;
the exact distribution terms for each program are described in the
individual files in /usr/share/doc/*/copyright.

Ubuntu comes with ABSOLUTELY NO WARRANTY, to the extent permitted by
applicable law.
Could not chdir to home directory /nonexistent: No such file or directory
This account is currently not available.
Connection to 10.10.11.254 closed.
failed to run ssh command: exit status 1

Because of nobody, you can see that at the beginning right prior your IP address.

The way you generated the key, you ended up not with root, but with nobody. Redo your thing or try just login doing a different path. 

Few posts above there was the documentation linked on ssh one time passwords...

[fallenmik]

same here...
VAULT_NAMESPACE is needed?
i have VAULT_TOKEN, VAULT_API_ADDR and VAULT_ADDR... I tried with vault and curl methods and I get "1 error occurred: permission denied" when I try to use "vault read"

Thanks

[peRd1]

Even if i have address and token every command returns 403 unauthorized, the only one that works is ./vault status what can i do?

did you have exported the values correctly? those 2 env variables? https://developer.hashicorp.com/vault/do...-variables

[fracksi]

Even if i have address and token every command returns 403 unauthorized, the only one that works is ./vault status what can i do?

Finally rooted.
I think the entire Vault instance is pretty shallow so you don't get much functionality out of it. The Hashicorp documentation is absolute garbage as well.
Pretty much all searches lead to people having backend access and fixing their own problems or being left without much help.

The biggest help I found, only after I slept on it and tried again a few hours ago:
https://stackoverflow.com/questions/7023...ashicorp-v

From here it should be straight forward. No idea where tf this was when I was searching yesterday but it should clear things up enough to find 3rd party help for the access.