[lolo_hacker_was_here]

i'm totally stucked at priv esc for nix02, and hints for got it

[optimusoggy]

DO you have shell using forward shell script?

[pwns4k3]

i'm totally stucked at priv esc for nix02, and hints for got it

it's been a long time, but if I am not mistaken lxc container manager is installed on the box and is accessible for joe's user so the way to get root was about uploading my image and making it run as a privileged container.

[lolo_hacker_was_here]

DO you have shell using forward shell script?

yes, i used ippsec script to get shell

---

i'm totally stucked at priv esc for nix02, and hints for got it

it's been a long time, but if I am not mistaken lxc container manager is installed on the box and is accessible for joe's user so the way to get root was about uploading my image and making it run as a privileged container.

joe user isn't in lxd group, also i can't upload any files to nix02

[optimusoggy]

DO you have shell using forward shell script?

yes, i used ippsec script to get shell

---

i'm totally stucked at priv esc for nix02, and hints for got it

it's been a long time, but if I am not mistaken lxc container manager is installed on the box and is accessible for joe's user so the way to get root was about uploading my image and making it run as a privileged container.

joe user isn't in lxd group, also i can't upload any files to nix02

its forward shell , please check the logs in whcih focus on wrong ssh root password attempt

[lolo_hacker_was_here]

DO you have shell using forward shell script?

yes, i used ippsec script to get shell

---

i'm totally stucked at priv esc for nix02, and hints for got it

it's been a long time, but if I am not mistaken lxc container manager is installed on the box and is accessible for joe's user so the way to get root was about uploading my image and making it run as a privileged container.

joe user isn't in lxd group, also i can't upload any files to nix02

its forward shell , please check the logs in whcih focus on wrong ssh root password attempt

i found this line in powershell.log and i tried password but it dosen't work
ScriptBlock_Compile_Detail:ExecuteCommand.Create.Verbose] Creating Scriptblock text (1 of 1):#012invoke-command -computername 192.168.24.89 -scriptblock {c:\users\joe\desktop\get-logs.ps1 -name joe -p HWaKJkUFgRe56WzG} -credential (Get-Credential)#012#012ScriptBlock ID: 012e044e-199c-47af-9680-9a8e876b5597#012Path:

[FR133NDS]

There is any hint on NIX 03 ?
i found the description for client_banking user, but the password not working at all.
i also already collect all password from beginning and still not working