« first day (2922 days earlier)      last day (1956 days later) » 

Anonymous
12:00 AM
I just get a syntax error.
 
Anonymous
Unless I'm being really dense, it does not like the 5.
 
forest
forest
wat
Type man 5 doas.conf
lol
 
Anonymous
Oh.
 
Anonymous
Sorry, I'm so tired. And so like... Done with this box lmao.
 
Anonymous
But, I don't like to leave things, I want to finish it before sleepy time.
 
Anonymous
12:02 AM
But it's 12;00 now.
 
forest
forest
(When someone references name(number), it usually means a manpage)
So like, ls(1) refers to the manpage for ls in section 1.
Likewise mmap(2) refers to the mmap system call.
 
Anonymous
<---- failfish
 
Anonymous
Sorry.
 
forest
forest
lol
 
Anonymous
I'm sad.
 
Anonymous
12:07 AM
This is only a medium box.
 
Anonymous
And I'm so STUCK.
 
forest
forest
You'll get better over time. It's practice!
So nothing in the doas.conf file that tells you what you can run?
And is this a bare OpenBSD install, or is it running some stack e.g. a webserver?
 
Anonymous
Ah. It's running something on port 80 but I could not navigate there.
 
Anonymous
It's also running Samba & LDAP.
 
Anonymous
LDAP is how I got my user shell.
 
forest
forest
12:09 AM
Any interesting daemons running as root?
If so, check the permissions of their config files and related files.
 
Anonymous
Sorry.
 
Anonymous
Not really Forest.
 
Anonymous
Oh.
 
Anonymous
I just looked again.
 
Anonymous
`root 64060 0.0 0.2 508 2028 ?? Isp Sun05PM 0:00.01 syslogd: [priv] (syslogd)
root 7948 0.0 0.1 688 632 ?? Is Sun05PM 0:00.00 pflogd: [priv] (pflogd)
`
 
Anonymous
12:16 AM
Haha.
 
Anonymous
That's interesting..
 
Anonymous
I don't think those run default...
 
Anonymous
12:39 AM
@forest I did it!
 
forest
forest
1:13 AM
Nice!
What ended up working?
 
 
2 hours later…
forest
forest
3:05 AM
Thinking of a way to generate randomness using just coin flips without bias... Would flipping a coin twice work if you discard the state and re-flip if the coins match?
If the coins don't match, then use the second flip as the true value.
It seems like that would completely avoid any bias in the coin flip.
 
 
2 hours later…
forest
forest
4:39 AM
I will never give my password, my laptop is now in investigation and i need to be sure they can't access it! — wimdewild 7 hours ago
To be honest i'm not really a wizkid, so i have no idea about firewall and such, all i know is i have a laptop with linux ubuntu + the encryption that you can choose when installing ubuntu. Police raided my house but before they could enter i managed to power off the laptop so i assumed it's encrypted and could only be accessed with the strong password i made. So basically you're saying they could take out the harddrive and still access it or somehow? — wimdewild 9 hours ago
@Tim They already asked for passwords but i didn't gave them anything, now they said they would try to hack into it, i really need to know if they can or not — wimdewild 6 hours ago
Poor guy. I hope he doesn't get tricked into revealing information.
 
 
2 hours later…
forest
forest
7:08 AM
Spectre v1 vuln found/fixed presumably manually upstream (at least smatch not credited for this one unlike 99% of others): https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=a538e3ff9dabcdf6c3f477a373c629213d1c3066 Respectre found/fixed it automatically already
Tweeted by grsecurity on December 15, 2018 at 12:56 PM
 
forest
forest
7:21 AM
This article makes the (pretty convincing) case that the multinational move against Huawei was coordinated among five eyes partners. https://amp.smh.com.au/business/companies/how-the-five-eyes-cooked-up-the-campaign-to-kill-huawei-20181213-p50m24.html
Tweeted by MalwareJake on December 15, 2018 at 5:50 PM
O_o
Sigh I hate reading Twitter. It just makes me depressed.
 
 
2 hours later…
Anonymous
9:16 AM
@forest I used an unintended exploit. The CVE was released after the box was, hah.
 
forest
forest
loool
 
Anonymous
 
forest
forest
Ah the Xorg bug.
 
Anonymous
Yeah.
 
Anonymous
I need to do some more reading on it.
 
Anonymous
9:17 AM
I was so tired I just script kiddied myself into the box.
 
forest
forest
I don't run setuid Xorg or Xorg as root on my system. :P
For the very reason that Xorg is insecure.
 
Anonymous
And fell asleep at the computer.
 
Anonymous
Forgot to even say goodnight to my girlfriend I was that tired.
 
Anonymous
Woke up this morning with letters printed in the side of my face.
 
Anonymous
The letters were "M O R O N" :)
 
forest
forest
9:19 AM
lmao
 
Anonymous
In all seriousness I was so tired I just script kiddied for privesc then slept at the desk hah
 
forest
forest
Well you got the exploit working.
All that matters is you got #!
 
Anonymous
That was not hard :p
 
Anonymous
CTRL + C, vi xorg.sh, CTRL+V, :wq, chmod +x xorg.sh, ./xorg.sh :p
 
forest
forest
lol
It's an easy vulnerability to exploit. You could have written it yourself!
No need to just run the script.
 
Anonymous
9:22 AM
I'm for sure going to go back to this box and privesc the intended way.
 
Anonymous
And I'm going to lab this vulnerability for a blog post I think.
 
Anonymous
Just because, why not :p
 
forest
forest
This thing is awesome.
Only in Japan :D
 
Anonymous
O.o
 
Anonymous
I use Nord theme on *Nix.
 
Anonymous
9:27 AM
Because, it looks pretty :p
 
forest
forest
I have no themes.
Nice and minimal Gentoo is how I like it.
 
Anonymous
:D
 
Anonymous
I love Nord theme though, it looks really clean.
 
Anonymous
Compared to a lot of themes.
 
forest
forest
What DE is it a theme for?
 
Anonymous
9:29 AM
Umm.
 
Anonymous
It's GTK3.
 
forest
forest
Ah
I don't use GTK (well, I don't think I have anything installed that needs it)
I've been so out of the loop for ricing/theming.
 
Anonymous
:p I use it in my Kali VM & Ubuntu.
 
forest
forest
You might find this interesting btw: github.com/xairy/linux-kernel-exploitation/blob/master/…
2
 
Anonymous
Now I'm doing Windows privesc for another box spits
 
Anonymous
9:32 AM
Oh wow, that's a nice list.
 
forest
forest
Windows is so foreign to me. I haven't used it in so long.
 
Anonymous
I hate it. This is only a 20 point box though so it should be fairly easy.
 
Anonymous
I say fairly easy, I am honestly so awful at privesc I usually require someone to help me.
 
Anonymous
Getting user accounts is pretty easy, most of the time these boxes have the same kinda' methods for getting a user account.
 
Anonymous
But for me, getting root is so damn hard for some reason.
 
Anonymous
9:36 AM
Some of these boxes can be a bit CTF-y as well.
 
Tom K.
Tom K.
7:41 PM
yay, just got a 35C3 ticket
 
Anonymous
@TomK. What is that Tom?
 
Tom K.
Tom K.
8:12 PM
@J.J the conference by the biggest German (and European I guess) hacker organization
the Chaos Communication Club
and the 35C3 is the 35th Chaos Communication Congress
 
Anonymous
Oh right @TomK.
 
Anonymous
Never heard of it.
 
Tom K.
Tom K.
9:47 PM
 

« first day (2922 days earlier)      last day (1956 days later) »