Node was a special box for me. It was a special box because it was my first “first blood”, and thus got me truly addicted to hackthebox. In light of this, I’m going mix things up and bit and make the following writeup a “love” note to Node:
it has been some time since we last spoke.
It’s been a while since my sweet TCP packets,
probed your open ports.
You rebuffed my attempts on 80. On 8080, 443, and more.
But you invited me into your space, into yourplace, into port 3000.
Yes, you did.
I dug into your deepest secrets.
And into the APIs which b(urp)equeathed your user sequence.
I saw you clearly, inside and out; cut through your defences:
turned /api/users/latest to /api/users and saw your shy response:
Were these your past lovers? I cared not.
But an admin flag, is an admin flag, and must be followed. Its hash looked weak.
Indeed, it was. “manchester”.
With each keystroke, we grew closer
You offered me your memories encoded in mystery. I was undeterred.
But still, you resisted me.
Who was this mark? I wondered. What boundries had you let him pass?
Nevermind. I had his secret, and he made a mistake, leaving this behind.
Node. My sweet Node. I felt so close to you.
We were separated by miles and miles, but I could feel your circuits responding to my touch.
I explored every inch of you, and found a special spot:
You accepted me, and I inserted my hopes and dreams….
…and I tasted your luscious blood.
You still had more secrets to find, like /usr/local/bin/backup.
In reversing it, I unziped your last garment -
unveiling your inner soul, root.txt, in whole.
You were so beautiful, so clever, and so true.
How I loved your mysteries – unfortunately, there were more boxes to do.
p.s. if you’d like to know how /usr/local/bin/backup fell to my wiles,
look to ltrace