Posts: 16
Threads: 0
Joined: Sep 2023
(Feb 04, 2024, 08:59 PM)fracksi Wrote: (Feb 04, 2024, 08:19 PM)al3xis Wrote: Even if i have address and token every command returns 403 unauthorized, the only one that works is ./vault status what can i do?
Finally rooted.
I think the entire Vault instance is pretty shallow so you don't get much functionality out of it. The Hashicorp documentation is absolute garbage as well.
Pretty much all searches lead to people having backend access and fixing their own problems or being left without much help.
The biggest help I found, only after I slept on it and tried again a few hours ago:
https://stackoverflow.com/questions/7023...ashicorp-v
From here it should be straight forward. No idea where tf this was when I was searching yesterday but it should clear things up enough to find 3rd party help for the access.
This is what I needed, thanks
Posts: 16
Threads: 0
Joined: Jan 2024
Posts: 10
Threads: 0
Joined: Feb 2024
(Feb 04, 2024, 09:06 PM)EnriQueHTB777 Wrote: When I create a new otp with "dev_otp_key_role", it always comes with the user nobody.
key_type otp
port 22
username nobody
And if I try it with "admin_otp_key_role" it tells me that I don't have permissions.
Error writing data to ssh/creds/admin_otp_key_role: Error making API request.
URL: PUT http://prd23-vault-internal.skyfall.htb/v1/ssh/creds/admin_otp_key_role
Code: 403. Errors:
* 1 error occurred:
* permission denied
Nobody isn't a user on the system. You should probably add a username so the key generation knows who it's going to then.
Posts: 5
Threads: 0
Joined: Feb 2024
First at all - you have to have got a id_rsa for user on the system askyy. Ad skyfall to authorized host. Then - very good aproach is to wget a vault from hashicorp and after unzip copy it to your linux /usr/bin/vault
Then export VAULT_API_ADDR and eventually VAULT_TOKEN . In that same shell with exported env check your setup by vault status. It should works
Posts: 3
Threads: 1
Joined: Nov 2023
It was a good machine after all , I am happy to offer help in dms.
Posts: 42
Threads: 2
Joined: Jan 2024
$ vault auth list
Error listing enabled authentications: Error making API request.
URL: GET http://prd23-vault-internal.skyfall.htb/v1/sys/auth
Code: 403. Errors:
* 1 error occurred:
* permission denied
help me guys, I got stuck here
Posts: 50
Threads: 8
Joined: Jan 2024
(Feb 05, 2024, 03:36 AM)KillerWhale Wrote: $ vault auth list
Error listing enabled authentications: Error making API request.
URL: GET http://prd23-vault-internal.skyfall.htb/v1/sys/auth
Code: 403. Errors:
* 1 error occurred:
* permission denied
help me guys, I got stuck here
You can login with token
Posts: 42
Threads: 2
Joined: Jan 2024
(Feb 05, 2024, 03:46 AM)GWTW Wrote: (Feb 05, 2024, 03:36 AM)KillerWhale Wrote: $ vault auth list
Error listing enabled authentications: Error making API request.
URL: GET http://prd23-vault-internal.skyfall.htb/v1/sys/auth
Code: 403. Errors:
* 1 error occurred:
* permission denied
help me guys, I got stuck here
You can login with token
thanks a lot
Posts: 12
Threads: 0
Joined: Nov 2023
Anyone has the root hash?
Posts: 10
Threads: 0
Joined: Feb 2024
(Feb 05, 2024, 05:17 AM)intersteller2038 Wrote: Anyone has the root hash?
Should be the same one as on your box.
|