#potarto

[nacora-najita]

the royal kings

love the fact that almost everyone forgot that cyan is technically the ruler of paradise, at least after the corruption lmao

[lunamoonpotato]

Going to Play Overwatch Tonight

Come on over to my twitch where I will be playing Overwatch with Nayo doing some Daily challenges around 11pm PST! I enjoyed drawing my vtuber model as kiriko!

[danu2203]

LAST NIGHT’S SUPPER...MINI MEAT LOAVES , BOILED CARROTS, MASHED POTATO AND SERRANO PEPPER SAUCE!

[ittybittybumblebee]

I LOVE SITTING IN BED ALL DAY GETTING PROGRESSIVELY SWEATIER AND GREASY AND ILL AND SICKLY TILLNI GO TO SLEEP. . I FEEL SO GREAT 🤗🤗🤗🤗 FOREVER. BEAUTIFUL LOVELY . GORGEOUS. SINGLE FRENCH FRY DIPPED IN OIL 🤗🤗😋😋😋 CRISPY SALTY LAYER OF GRIME ON FLESH 👌💪💪💪💪💪 POTARTO PEELER SLIDE RIGHT OFF ME . GREASE OF THE BEAST. HOGLET SLIME 💥💥💥

[cloudcountry]

Dog photo bc she thinks everything is a game

shes so POtarto

[thecapefangirl]

The Disney Hercules movie may have screwed up on the source material but at least they acknowledged the right way to say “vase”

[panaceand30]

Troll: You have a skintag here where you can't see it.

Me: God no why tell me that uuugh

Troll: Sorry. I won't tell you in future.

Me: I just... I cannot. I'll need a picture of it. Please.

Troll: I think you have body dysmorphia, bb.

Me: No, I just have friggin autism where if somewhere on my body there's a too long hair, or skin tag or something I will obsess over it until its plucked or gone.

Troll: I mean. Potayto potarto.

Me: Why I gotta be like this?

[c-cracks]

HTB - Legacy

As the Resolute root flag is proving rather difficult for my nooby skill level at the moment, I decided to take a breather and rooted Legacy tonight.

I must say it’s restored my faith in myself a bit- I’ve discovered that I’m only so slow momentarily due to a lack of knowledge (e.g. Sauna took me longer due to not being aware of how to properly enumerate a Domain Controller.)

I think Legacy took me an hour if that all together; it’s honestly not a bragging point as you simply have to utilize ms08-067 (a buffer overflow vulnerability triggered by specially crafted RPC requests, exploited by the Conficker worm detected in late 2008) which grants you the ability of arbitrary code execution on the machine.

I started off with my enum script which revealed 3 interesting ports:

We have netbios-ssn (netbios session service), microsoft ds (directory service) and ms wbt server (windows-based terminal); as the wbt server is closed, our focus will be on netbios and ds.

Googling microsoft ds brings up an obvious clue:

Obviously this is going to be our target, meaning scripts such as enum4linux, nmblookup and smbclient will come to our aid (https://www.hackingarticles.in/a-little-guide-to-smb-enumeration/ for more on this.)

Using these scripts, however, doesn’t really reveal anything- attempts to connect to the ds through smbclient time out, the same for using RPC client to connect to netbios-ssn.

Our obvious next check will be against public exploits out for Windows XP SP3 that utilize SMB or RPC. I simply Googled this; upon reflection I could have instead utilized nmap nse scripts to check for this issue:

   smb-vuln-conficker    smb-vuln-cve2009-3103    smb-vuln-ms06-025    smb-vuln-ms07-029    smb-vuln-regsvc-dos    smb-vuln-ms08-067

By simply appending --script smb-vuln* to the standard nmap scan, all of these scripts would have been executed during the port scan of Legacy. This would have saved me 10-20 minutes of time.

Upon this discovery, there are two ways to proceed- you can either use exploit/windows/smb/ms08_067_netapi through Metasploit or you can utilize a script out for exploiting this vulnerability.

In the spirit of both OSCP and not being a complete script kiddy, I opted for the use of a publicly available Python script exploiting this b/o vulnerability (https://github.com/jivoi/pentest/blob/master/exploit_win/ms08-067.py)

root@kali:~/penetesting/legacy# nc -vlp 6969 listening on [any] 6969 ... connect to [10.10.14.47] from legacy.htb [10.10.10.4] 1031 Microsoft Windows XP [Version 5.1.2600] (C) Copyright 1985-2001 Microsoft Corp.

You simply have to replace the example shellcode with shellcode of your choosing and fire away. I chose to stick to a simple reverse shell due to the need to investigate the system after the initial foothold.

Some simple enumeration reveals we are user Network Service:

For some reason, NetworkService has the near equivalent to system privileges- with this you can grab both the root and user flags.

So Legacy was quick and sweet. Challenging? No. An achievement? No. However, I’m still glad I took the hour to do it as it’s my first time successfully using a public exploit and I also know that the vulnerable service is microsoft Directory Service, not SMB (that’s the protocol goddamnit. xD)

Reading other people’s walkthroughs has revealed that you could also use the Eternal Blue exploit against Legacy; honestly potato, potato (imagine I’m saying the second potato as potarto) :P

[jonny-versace]

I agree almost completely with you on things you said about the Dddiscourse but there is an aspect of it i personaly understand. The thing about "dedication of the actors" most of the time has to do with valid -more often than not- comparison/complains about how dryan act their kissing scenes. Vanity/Moira & lovers etc kiss -more- realistically. They open their mouths pretending its a real kiss where Dryan never does that they just touch faces without moving the lips.

What am I missing here?

And your descriptor isn't always true anyway, I've watched them enough. And how is one tiny aspect of a whole enough to call into question their dedication? You say it's valid, I say it's dumb insulting nitpicking. Potayto/potarto I suppose.

[spatteghi]

winter 

[nacora-najita]

shaking their lil ears? horns?

we will never know

[senoritaugly-art]

I'm sorry I've been slacking terribly #inktober is kicking me in the ass- or drinking and staying out too late is. Potato/potarto. Here's a drawing of what my insides are probably like. 💀☠️ . . . #illustration #art #drawing #ink #inktober2017 #pen #pendrawing #window #plants #shitty #shithole #sketchbook #sketch #old

[askprosciutto]

((This might be late??? But??? I heard my favorite potarto is having a birthday????? HAPPY BIRTHDAY!!!!!!))

((WHEEZES, THIS POTARTO IS GETTING OLD, MOR,,, THANK YOU ILY💜✨))

[shillingandflorin]

You say potayto, i say potarto

[mosseysnewallotment]

“You say poTAYto and I say poTARto...........”  

Today was ‘tater picking day. The last few “charlotte” new potatoes and my preferred maincrop “mozart”.  Not a spectacular yield but good enough and it is a really tasty spud. 

Todays barrow contains raspberries, onions a couple of “jester” apples and some very nice dahlias.