[KillerWhale]

any ideas for root flag? I'm searching but no luck

[GWTW]

any ideas for root flag? I'm searching but no luck

For the root flag,

Dig master token according to the sudo -l (Hint: debug mode)
and generate OTP just like user OTP with vault.

There you go...

You can DM me for certain points.
Good luck!

[KillerWhale]

any ideas for root flag? I'm searching but no luck

For the root flag,

Dig master token according to the sudo -l (Hint: debug mode)
and generate OTP just like user OTP with vault.

There you go...

You can DM me for certain points.
Good luck!

ok i will try it

[xavior]

curl \
--header "X-Vault-Token: $VAULT_TOKEN" \
--request POST \
--data '{"ip":"10.10.11.254", "username":"askyy"}' \
$VAULT_ADDR/v1/ssh/creds/dev_otp_key_role

this worked just fine

[fuliye]

Why can't I export the data of the machine with the mc command?，this is my command :
mc alias set cxc http://prd23-s3-backend.skyfall.htb 5GrE1B2YGGyZzNHZaIww GkpjkmiVmpFuL2d3oRx0

This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Leeching | http://c66go4clkqodr7tdjfu76jztjs7w7d3fajdeypxn73v4ju3dt7g5yyyd.onion/Forum-Ban-Appeals if you feel this is incorrect.

[DwightSchrute]

askyy@skyfall:/sys/module$ sudo /root/vault/vault-unseal -c /etc/vault-unseal.yaml -v
[+] Reading: /etc/vault-unseal.yaml
[-] Security Risk!
[-] Master token found in config: ****************************
[>] Enable 'debug' mode for details
[+] Found Vault node: http://prd23-vault-internal.skyfall.htb
[>] Check interval: 5s
[>] Max checks: 5
[>] Checking seal status
[+] Vault sealed: false

askyy@skyfall:/sys/module$ sudo /root/vault/vault-unseal -c /etc/vault-unseal.yaml -v -d
2024/02/05 09:55:18 open ./debug.log: permission denied


 dont get the last step..help please...

[vasabig888]

Same problem. Can anybody advice?

[otaznik]

./debug.log  create as user askyy

[DwightSchrute]

got it....dont forget to chmod

[xavior]

anyone can help me # ./vault login
Token (will be hidden):
Error authenticating: error looking up token: Error making API request.

URL: GET http://prd23-vault-internal.skyfall.htb/...ookup-self
Code: 403. Errors:

* permission denied

https://stackoverflow.com/questions/7023...ashicorp-v