[betecito]

Hey, don't worry about it, I was stuck on it from Sunday until yesterday xD Now if you manage to find a way to root the machine I will be very interested in hearing what you find

I personally automated it with a small ~140 line JavaScript program to automate it for me, but I'm sure there are other methods you could use for that

Thank you
I think root is over my skills

That's entirely fair, I'm starting to think the same   The issue is the exploit required (I think) is easy enough to pull off, but I need access to the postgres user in order to do it. I believe this is the exploit we'll have to use since root commonly uses "su -l postgres", but I can't figure out how to get access to that postgres user

I'm the same, I don't know how to scale to postgres

[clotheslineman]

Ahhhh ffs I found it. Grep is a hero in this one, "grep -rnw '/' -e 'localhost:5432' 2>/dev/null" will find the postgres creds, now to start crafting my privesc payload!

[dsqdqsfqfsdgtru]

Thank you everybody. I brainfucked, I was able to check my own password and hash, i was able to forge "startsWith" but i didn't think about combinate the two informations ...

[Nutthanon]

I got postgres with ssl-cert group but don't know how to do next.
any help?

[cavour13]

Guys i finally make cookie-monster work and i can see wesley home but now how can i exfiiletrate pass? i used to {"flashes":{"info":[],"error":[],"success":[]},"user":{"username":"WESLEY", "password": { "startsWith": "d"}}}

[Kylekk76]

Hi everyone, i have troubles with cookie-monster, i get to installed and to use it my problem is when i send the cookie, redirect me to auth, instead of show me any files as this post said. Could be posible some help with this? i came really late to start with this box.

[Nutthanon]

I got postgres with ssl-cert group but don't know how to do next.
any help?

Have you seen 3th page in this topic? maybe it help to you

Thank you. already got this root!

[DeVos]

Nice Box lol

[Addka72424]

The last non-spam response in the topic was more than a month ago. I close the topic as irrelevant to prevent spam. If this is not the case, please send a pm and I will open the topic for discussion again.