[lingling40hrs]

Disclaimer: beginers probably cannot do this even with the below walkthrough. Cause this is a summerized solution for who are close but not there yet.

Hidden Content

You must register or login to view this content.

[lingling40hrs]

The root is pwn, so probably I won't do it cause I don't like pwn that much. If i do tho i will share it.

[randomname83]

The root is pwn, so probably I won't do it cause I don't like pwn that much. If i do tho i will share it.

can you upload the pwn binary?
i would like to look at it

[lingling40hrs]

that's an interesting idea. let me do that.

[Kali76]

in the configuration file there are spaces every line, is this correct or is it an error? I ask because it doesn't work for me

[lingling40hrs]

yeah it's correct just see any ssh config file in the web. https://linuxize.com/post/using-the-ssh-...le-example

As I said in the post you need to know a little bit about things to make this work. But yes it works.

---

The root is pwn, so probably I won't do it cause I don't like pwn that much. If i do tho i will share it.

can you upload the pwn binary?
i would like to look at it

hey here is the file: https://anonfiles.com/R0zbn6B0p6/authkeys

md5 e30566911efa72a62210e0079ab5df95  authkeys

to verify

---

For ppl wanting to get the root binary that is above and this is some extra information:
i have uploaded the binary and posted in the thread :-)

[ ] enable authkeys command for sshd
[x] remove source code
[ ] use nobody
on attendedgw:
[x] enable authkeys command for sshd
[x] remove source code
[ ] use nobody

this is a note.txt ^


and this is /etc/hosts

192.168.23.2 attended.attended.htb attended

192.168.23.1 attendedgw.attended.htb attendedgw

[lingling40hrs]

lol this is the attended user graph. You ppl are really at it eh? :rofl:

[0xvijay]

lol this is the attended user graph. You ppl are really at it eh? :rofl:

Don't you saw the rope2 root graph?

[lingling40hrs]

No i didn't know about rf then. :rofl:

[lingling40hrs]

So, ppl who are struggling to get the mail from guly.

the mail is coming to freshness so make a new user in ur attackbox. then open the file /var/mail/freshness.

Like you can either make a new user or create a mail alias. But i did the former one, I did sudo adduser freshness and the mail started to come to /var/mail/freshness.

I understood that it is indeed coming to freshness by watching the logs at /var/log/mail.log and got the idea of creating an user.

[lingling40hrs]

Bumping this up as this needs to get rooted lol

[0xvijay]

Bumping this up as this needs to get rooted lol

no one rooted it yet :(


Bumpppppppppppppppppppppppppppppppppppp