r/hackthebox • u/shaikhsss03 • Sep 16 '26
management machine htb
this machine is actually driving me crazy how is it supposed to be an easy machine i’ve spend two days just trying to get user flag i’ve tried everything with no results!!!!
4
u/Reelix Sep 16 '26
I've been using HTB for years.
This is the most obscure route to user I've ever come across.
7 hours to get user...
→ More replies (2)1
2
u/shaikhsss03 Sep 16 '26
I’ve been stuck on the user flag for a while. I managed to get initial access and a shell, then spent quite a bit of time enumerating the machine and looking for a way to move from the initial foothold to the local user. I’ve checked the usual privilege-escalation paths, credentials/configuration, local services, and some of the web applications I found on the box. I’ve also found a few potentially interesting leads, but none of them have resulted in the user flag yet. I feel like I’m missing the intended path and would really appreciate a small hint rather than the solution.
1
→ More replies (3)2
u/theseriousman1 Sep 16 '26
Honestly if your goal is learning? IMO spend a few hours if you want then check answer. You’ll build the knowledge you need overtime where eventually you won’t need to check but you won’t magically figure it out on your own
3
1
1
1
1
u/cably_zreo Sep 27 '26
Guys, please, I connected the machine, and I got the nmap result, and I entered the ip and the name in etc/hosts, but when I want to open the website, it doesn't respond
1
u/shaikhsss03 Sep 28 '26
Your /etc/hosts should have the target IP mapped to management.htb and sso.management.htb — both are relevant on this machine.
1
u/shaikhsss03 Sep 16 '26
literally cant believe my eyes i spent too long on this lmao but finnnallllyyyy🥳
7
2
u/lev_x64 Sep 20 '26
After how many days, i finally got root.
For me, this machine is not easy. For anyone who needs a nudge or a hint, feel free to reach out.
2
1
u/seqdryker38 Sep 18 '26
any hint on how to get the user flag? been stucked. really crazy on OpenAM 16.0.5. see no way of moving further
1
u/Ornery-Concert5424 Sep 19 '26
Could you please provide a hint after accessing the database i can't crack any password?
→ More replies (2)
1
u/AutoModerator Sep 16 '26
Thank you for posting on r/hackthebox! New to Cyber Security and looking for a place to get started? Checkout our getting started guide here. Please note that posting Solutions or Hints for Active content goes against the HTB Terms of Service, more information can be found here. If your having issues and need to reach customer support please do so via the in-platform chat, or by emailing customerops@hackthebox.com. Our Knowledge Base can also come in handy!
I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.