#KING OF THE HILL HOW TO#
#KING OF THE HILL PATCH#

Do NOT use msfconsole: (This is my personal opinion)

You can use (any note taking app you like) Notion, make folders of machines, log the commands you used to get into machines, these small things will save your time the next time you face the same machine. You know there are 2 wordlists named big.txt? One in SecLists (If you don't know about this, then minimize this article and google.) and one in dirbuster? BUT what if you combine them and make one wordlist, with unique-ed out directories in alphabetical order? Most important of them all, Taking Notes: This is also made by Bee, and this thing can go as fast as scanning all 65535 ports in one second.) This thing is ridiculously fast, you can make it faster if you give its documentation a read and make a config file that suits your system. We are not the best at this, but following are few things that you can use that will ( maybe) make you faster than others.

#KING OF THE HILL HOW TO#

Now, we know how to hack, but we need to know how to hack fast. Now, we get an IP address, and we get a timer, our goal is to get a root shell on this IP address before other players in your game do and the timer ends. You can refer to this blog post that is by Bee (TryHackMe Moderator), Link: If you are playing king of the hill, then it is obvious that you are on intermediate level on TryHackMe, because this is for players with some experience in solving/hacking boxes, if you are new, we'd advise you to NOT play this and solve some basic boxes first. We start this machine like every other box/machine on TryHackMe, we get an IP, and we enumerate it. If possible share game link and username of the person breaking the rules. If you think anyone breaking any of the above rules or the ones mentioned at the site's rules page, you can report them at or let koth-staff know in the discord. But as implied by rules, while planting rootkits, make sure you do not break the machine or make it unusable for everyone but you.

Or if you want to more cheeky try to find a way to make them play Tetris. Speaking of which you can always use urandom or my personal favorite: Nyancat that would be more fun, too, instead of just killing the shell.

#KING OF THE HILL PATCH#

Try to patch the ways others are getting the shells instead of just spamming kill command. Remember its not a fight if there is no one in the ring.

Killing shells is allowed but it shouldn't be abused. You shouldn't use scripts to automatically kill other people's shells. Go wild in private games with your friends. Scripted autopwns which root a box from start to finish are banned from public games. You should not use autopwns (Or Any sort of script that automatically hack/harden the box) as that really will defy the purpose of the game. As that essentially made the machine unavailable for them. You should not do things like: rm -rf /usr/bin/* or chmod 700 /usr/bin/* as it will make it impossible for other users to use simple commands or even interact with the box using their shell. Stuff like shifting the service to another port is allowed. There's no vulnerability that can't be patched. While patching, you should not completely delete a whole web server but instead try looking for a method to patch it. You should not alter, remove or replace flags from the machine as it's totally against the rules. When you face a dead end you should try looking for other possible options instead of voting to reset the box. There is an option available to reset the box and that should only be used when the machine is broken, not when it's patched. There is one thing common in every KoTH machine and that is, port 9999, which is running king service so you are definitely not supposed to stop/alter that service or close the port itself. This is a gentleman's game and should be played like one.ДЇirst, you should read KoTH rules: Here's a detailed explanation of rules and boundaries regarding rules mentioned above: The longer you maintain your access, the more points you get.Д«efore we dive into what we can do and how we can fight in the game with other players, we should clear some boundaries on what should not be done in this, otherwise with a root shell, the scope is limitless. (A very, very small summary) King of the Hill is a competitive hacking game, where you play against 10 other hackers to compromise a machine and then patch its vulnerabilities to stop other players from also gaining access.

King of the hill