Skyfall - HTB
by paven - Saturday February 3, 2024 at 02:10 PM
#81
(02-04-2024, 08:59 PM)fracksi Wrote:
(02-04-2024, 08:19 PM)al3xis Wrote: Even if i have address and token every command returns 403 unauthorized, the only one that works is ./vault status what can i do?

Finally rooted.
I think the entire Vault instance is pretty shallow so you don't get much functionality out of it. The Hashicorp documentation is absolute garbage as well.
Pretty much all searches lead to people having backend access and fixing their own problems or being left without much help.

The biggest help I found, only after I slept on it and tried again a few hours ago:
https://stackoverflow.com/questions/7023...ashicorp-v

From here it should be straight forward. No idea where tf this was when I was searching yesterday but it should clear things up enough to find 3rd party help for the access.

This is what I needed, thanks
Reply
#82
choose dev role
Reply
#83
(02-04-2024, 09:06 PM)EnriQueHTB777 Wrote: When I create a new otp with "dev_otp_key_role", it always comes with the user nobody.
key_type          otp
port              22
username          nobody
And if I try it with "admin_otp_key_role" it tells me that I don't have permissions.
Error writing data to ssh/creds/admin_otp_key_role: Error making API request.

URL: PUT http://prd23-vault-internal.skyfall.htb/v1/ssh/creds/admin_otp_key_role
Code: 403. Errors:

* 1 error occurred:
* permission denied

Nobody isn't a user on the system. You should probably add a username so the key generation knows who it's going to then.
Reply
#84
First at all - you have to have got a id_rsa for user on the system askyy. Ad skyfall to authorized host. Then - very good aproach is to wget a vault from hashicorp and after unzip copy it to your linux /usr/bin/vault

Then export VAULT_API_ADDR and eventually VAULT_TOKEN . In that same shell with exported env check your setup by vault status. It should works
Reply
#85
It was a good machine after all , I am happy to offer help in dms.
Reply
#86
$ vault auth list
Error listing enabled authentications: Error making API request.

URL: GET http://prd23-vault-internal.skyfall.htb/v1/sys/auth
Code: 403. Errors:

* 1 error occurred:
* permission denied

help me guys, I got stuck here
Reply
#87
(02-05-2024, 03:36 AM)KillerWhale Wrote: $ vault auth list
Error listing enabled authentications: Error making API request.
                                                                                               
URL: GET http://prd23-vault-internal.skyfall.htb/v1/sys/auth                                   
Code: 403. Errors:                                                                             
                                                                                               
* 1 error occurred:                                                                           
        * permission denied

help me guys, I got stuck here

You can login with token

vault login
Reply
#88
(02-05-2024, 03:46 AM)GWTW Wrote:
(02-05-2024, 03:36 AM)KillerWhale Wrote: $ vault auth list
Error listing enabled authentications: Error making API request.
                                                                                               
URL: GET http://prd23-vault-internal.skyfall.htb/v1/sys/auth                                   
Code: 403. Errors:                                                                             
                                                                                               
* 1 error occurred:                                                                           
        * permission denied

help me guys, I got stuck here

You can login with token

vault login

thanks a lot
Reply
#89
Anyone has the root hash?
Reply
#90
(02-05-2024, 05:17 AM)intersteller2038 Wrote: Anyone has the root hash?

Should be the same one as on your box.
Reply


Possibly Related Threads…
Thread Author Replies Views Last Post
  [FREE] 300+ Writeups PDF HackTheBox/HTB premium retired Tamarisk 360 88,710 03-28-2026, 09:28 AM
Last Post: catsweet
  [FREE] HTB-ProLabs APTLABS Just Flags kewlsunny 23 2,348 03-28-2026, 03:30 AM
Last Post: lulaladrow
  [MEGALEAK] HackTheBox ProLabs, Fortress, Endgame - Alchemy, 250 Flags, leak htb-bot htb-bot 87 7,490 03-27-2026, 07:22 PM
Last Post: stn
  HTB Eloquia User and Root Flags - Insane Box 69646B 13 350 03-27-2026, 06:14 PM
Last Post: vlxw
  HTB - ALL Challenges you Stuck in osamy7593 2 646 03-27-2026, 04:24 PM
Last Post: catsweet



 Users browsing this thread: 1 Guest(s)