Skyfall - HTB
by paven - Saturday February 3, 2024 at 02:10 PM
#81
(Feb 04, 2024, 08:59 PM)fracksi Wrote:
(Feb 04, 2024, 08:19 PM)al3xis Wrote: Even if i have address and token every command returns 403 unauthorized, the only one that works is ./vault status what can i do?

Finally rooted.
I think the entire Vault instance is pretty shallow so you don't get much functionality out of it. The Hashicorp documentation is absolute garbage as well.
Pretty much all searches lead to people having backend access and fixing their own problems or being left without much help.

The biggest help I found, only after I slept on it and tried again a few hours ago:
https://stackoverflow.com/questions/7023...ashicorp-v

From here it should be straight forward. No idea where tf this was when I was searching yesterday but it should clear things up enough to find 3rd party help for the access.

This is what I needed, thanks
Reply
#82
choose dev role
Reply
#83
(Feb 04, 2024, 09:06 PM)EnriQueHTB777 Wrote: When I create a new otp with "dev_otp_key_role", it always comes with the user nobody.
key_type          otp
port              22
username          nobody
And if I try it with "admin_otp_key_role" it tells me that I don't have permissions.
Error writing data to ssh/creds/admin_otp_key_role: Error making API request.

URL: PUT http://prd23-vault-internal.skyfall.htb/v1/ssh/creds/admin_otp_key_role
Code: 403. Errors:

* 1 error occurred:
* permission denied

Nobody isn't a user on the system. You should probably add a username so the key generation knows who it's going to then.
Reply
#84
First at all - you have to have got a id_rsa for user on the system askyy. Ad skyfall to authorized host. Then - very good aproach is to wget a vault from hashicorp and after unzip copy it to your linux /usr/bin/vault

Then export VAULT_API_ADDR and eventually VAULT_TOKEN . In that same shell with exported env check your setup by vault status. It should works
Reply
#85
It was a good machine after all , I am happy to offer help in dms.
Reply
#86
$ vault auth list
Error listing enabled authentications: Error making API request.

URL: GET http://prd23-vault-internal.skyfall.htb/v1/sys/auth
Code: 403. Errors:

* 1 error occurred:
* permission denied

help me guys, I got stuck here
Reply
#87
(Feb 05, 2024, 03:36 AM)KillerWhale Wrote: $ vault auth list
Error listing enabled authentications: Error making API request.
                                                                                               
URL: GET http://prd23-vault-internal.skyfall.htb/v1/sys/auth                                   
Code: 403. Errors:                                                                             
                                                                                               
* 1 error occurred:                                                                           
        * permission denied

help me guys, I got stuck here

You can login with token

vault login
Reply
#88
(Feb 05, 2024, 03:46 AM)GWTW Wrote:
(Feb 05, 2024, 03:36 AM)KillerWhale Wrote: $ vault auth list
Error listing enabled authentications: Error making API request.
                                                                                               
URL: GET http://prd23-vault-internal.skyfall.htb/v1/sys/auth                                   
Code: 403. Errors:                                                                             
                                                                                               
* 1 error occurred:                                                                           
        * permission denied

help me guys, I got stuck here

You can login with token

vault login

thanks a lot
Reply
#89
Anyone has the root hash?
Reply
#90
(Feb 05, 2024, 05:17 AM)intersteller2038 Wrote: Anyone has the root hash?

Should be the same one as on your box.
Reply


Possibly Related Threads…
Thread Author Replies Views Last Post
  [FREE] HackTheBox Dante - complete writeup written by Tamarisk Tamarisk 600 91,277 22 minutes ago
Last Post: phannguyenbaouy1
  [FREE] 300+ Writeups PDF HackTheBox/HTB premium retired Tamarisk 371 92,682 27 minutes ago
Last Post: phannguyenbaouy1
  [FREE] CPTS 12 FLAGS pulsebreaker 67 1,827 35 minutes ago
Last Post: phannguyenbaouy1
  [FREE] HackTheBox Academy - CBBH CDSA CPTS All Modules Flags Techtom 21 2,583 4 hours ago
Last Post: popoler
  Hack the box Pro Labs, VIP, VIP+ 1 month free Method RedBlock 23 2,232 Yesterday, 02:10 PM
Last Post: kkkato

Forum Jump:


 Users browsing this forum: 1 Guest(s)